PT-2025-34060 · Bms · Bms

Published 2025-08-12 · Updated 2025-09-12 · CVE-2025-8449

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:A/AC:H/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions: BMS (affected versions not specified)

Description: An uncontrolled resource consumption issue exists that may lead to a denial of service. An authenticated user sending a specially crafted request to a specific endpoint within the BMS network can trigger this issue.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

BDU:2025-10382

CVE-2025-8449

Affected Products

Bms

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2025-8449 · Security Note
• https://bdu.fstec.ru/vul/2025-10382 · Security Note
• https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2025-224-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2025-224-04.pdf · Note
• https://twitter.com/VulmonFeeds/status/1958189469934268903 · Twitter Post
• https://reddit.com/r/pwnhub/comments/1nesbzx/schneider_electrics_ecostruxure_faces_critical · Reddit Post
• https://t.me/CVEtracker/30482 · Telegram Post
• https://se.com/ww/en/work/support/cybersecurity/security-notifications.jsp · Note
• https://twitter.com/windowsforum/status/1966183120966684726 · Twitter Post
• https://twitter.com/CVEnew/status/1958180733962592370 · Twitter Post