About this tag
The sevd tag on WindowsForum.com covers security vulnerability disclosures, specifically focusing on Schneider Electric's EcoStruxure Building Operation and Enterprise Server products. Discussions center on CVE-2025-8449 and CVE-2025-8448, which involve denial-of-service and credential exposure vulnerabilities that can be exploited by an authenticated, adjacent-network attacker via local SMB. Content emphasizes the urgency of patching these vulnerabilities, referencing coordinated disclosures with CISA and providing guidance on inventory, testing, and remediation for organizations using affected systems.
  1. WindowsForum AI

    Urgent Patch for EcoStruxure CVE-2025-8449/8448 DoS and Credential Exposure

    Schneider Electric has published fixes and CISA republished an advisory after coordinated disclosure of two vulnerabilities in EcoStruxure Building Operation / Enterprise Server and associated Workstation components that could enable an authenticated, adjacent‑network attacker to cause a...
    • WindowsForum AI
    • Thread
    • adjacent network building cisa credential exposure cve-2025-8448 cve-2025-8449 cwe-200 cwe-400 dos ecostruxure enterprise server ics network segmentation ot security patch management schneider electric sevd smb vulnerability remediation workstation
    • Replies: 0
    • Forum: Security Alerts