EcoStruxure Building Operation Security Notification

This document details multiple vulnerabilities in EcoStruxure Building Operation (EBO) Enterprise Server, Enterprise Central, and Workstation, including a denial-of-service risk (CVE-2025-8449) and a credential exposure risk (CVE-2025-8448) from within the BMS network. It provides fixed version numbers (7.0.2.348, 6.0.4.10001 CP8, 5.0.3.17009 CP16) and remediation steps, along with mitigations such as access controls and network segmentation.