A vulnerability identified as CWE-200 allows for the exposure of sensitive information to unauthorized actors. This could lead to unauthorized access to sensitive credential data if an attacker captures local SMB traffic between a valid user and the vulnerable products within the BMS network.
Details
| Severity | Base Score | CVE |
|---|---|---|
| LOW | 2.3 | CVE-2025-8448 |
Exploitation
To exploit this vulnerability, an attacker must be on the same local network as a valid user of the BMS system. By capturing SMB traffic, the attacker can gain access to sensitive credential data, which can then be used for unauthorized access to the system.
Affected Products
- Building Management System (BMS): Vulnerable to unauthorized access through SMB traffic interception.
Mitigation
To mitigate this vulnerability, it is recommended to implement network segmentation to limit access to the BMS network. Additionally, ensuring that SMB traffic is encrypted can help protect sensitive credential data from being intercepted.