EcoStruxure™ Building Operation Enterprise Server, EcoStruxure™ Building Operation Enterprise Central, and EcoStruxure™ Workstation

An attacker with network access and valid user credentials could steal login credentials and gain unauthorized access to the building management system, potentially allowing them to remotely change building operations, disable safety controls, or disrupt energy systems.

Building automation and energy management operators responsible for EcoStruxure Building Operation platforms. This affects organizations running Building Operation Enterprise Server, Enterprise Central, or Workstation software versions 5.x, 6.x, or 7.x. Impacts are relevant to facility managers and IT staff at utilities, commercial buildings, hospitals, universities, and industrial facilities that rely on centralized building management systems for HVAC, lighting, energy control, and facility monitoring.

An attacker on the same network segment as the EcoStruxure system could intercept or extract stored credentials from the application. With stolen credentials, they could log in as a legitimate user and execute commands within the building management system to alter HVAC setpoints, disable alarms, or stop critical building operations.