Schneider Electric Ecostruxure Enterprise Server vulnerabilities

2 CVEs affecting Schneider Electric Ecostruxure Enterprise Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-8449, published 2025-08-20.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-8449, published 2025-08-20. Medium severity, CVSS 4.1. EPSS: 0.3% chance of exploitation in the next 30 days. CWE-400: Uncontrolled Resource Consumption vulnerability exists that could cause a denial of service when an authenticated user sends a specially crafted request to a specific endpoint from within…
CVE-2025-8448, published 2025-08-20. Low severity, CVSS 1.0. EPSS: 0.2% chance of exploitation in the next 30 days. CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that could cause unauthorized access to sensitive credential data when an attacker is able to capture local…