4.1
Medium
CVE-2025-8449 CWE-400: Uncontrolled Resource Consumption vulnerability exists that could cause a denial of service when an…
Description
CWE-400: Uncontrolled Resource Consumption vulnerability exists that could cause a denial of service when an authenticated user sends a specially crafted request to a specific endpoint from within the BMS network.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| EcoStruxure Building Operation Enterprise Server 7.0 | earliest → < 7.0.2.348 | 7.0.2.348 |
| EcoStruxure Enterprise Server | Versions not published | |
| EcoStruxure Building Operation Workstation 7.0 | earliest → < 7.0.2.348 | 7.0.2.348 |