VULNERABILITY INTELLIGENCE
CVE-2025-8448
EPSS probability0.20%
CISA KEVNot currently listed
Published2025-08-20
Last modified2026-06-17
Description
CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that could cause unauthorized access to sensitive credential data when an attacker is able to capture local SMB traffic between a valid user within the BMS network and the vulnerable products.
Weakness classification
- cybersecurity@se.com: CWE-200