PT-2025-34059 · Smb · Smb

Published 2025-08-12 · Updated 2025-09-12 · CVE-2025-8448

Positive Technologies (AI Summary)

CVSS v2.0

1.4

Low

Base vector

AV:A/AC:H/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: SMB (affected versions not specified)

Description: A vulnerability exists that could cause unauthorized access to sensitive credential data when an attacker is able to capture local SMB traffic between a valid user within the BMS network and the vulnerable products. This allows an unauthorized actor to potentially access confidential information.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2025-10626

CVE-2025-8448

Affected Products

Smb

References · 9

• https://bdu.fstec.ru/vul/2025-10626 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-8448 · Security Note
• https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2025-224-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2025-224-04.pdf · Note
• https://reddit.com/r/pwnhub/comments/1nesbzx/schneider_electrics_ecostruxure_faces_critical · Reddit Post
• https://se.com/ww/en/work/support/cybersecurity/security-notifications.jsp · Note
• https://twitter.com/CVEnew/status/1958180732784029752 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1958192029873082761 · Twitter Post
• https://twitter.com/windowsforum/status/1966183120966684726 · Twitter Post
• https://t.me/CVEtracker/30481 · Telegram Post