VULNERABILITY INTELLIGENCE

CVE-2025-8448

CVSS score2.3 LOW

EPSS probability0.20%

CISA KEVNot currently listed

Published2025-08-20

Last modified2026-06-17

Description

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that could cause unauthorized access to sensitive credential data when an attacker is able to capture local SMB traffic between a valid user within the BMS network and the vulnerable products.