~/products/schneider-electric/ecostruxure_power_build_rapsody

pipeline liveDigest Docs

Schneider-Electric Ecostruxure Power Build Rapsody vulnerabilities

4 known vulnerabilities affecting schneider-electric/ecostruxure_power_build_rapsody.

Total CVEs

4

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH3MEDIUM1

Vulnerabilities

SortPage 1 of 1

CVE-2021-22698P3HIGHCVSS 7.8≤ 2.1.132021-01-26

CVE-2021-22698 [HIGH] CWE-434 CVE-2021-22698: A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists in the EcoStruxure P A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists in the EcoStruxure Power Build - Rapsody software (V2.1.13 and prior) that could allow a stack-based buffer overflow to occur which could result in remote code execution when a malicious SSD file is uploaded and improperly parsed.

CVE-2021-22697P3HIGHCVSS 7.8≤ 2.1.132021-01-26

CVE-2021-22697 [HIGH] CWE-434 CVE-2021-22697: A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists in the EcoStruxure P A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists in the EcoStruxure Power Build - Rapsody software (V2.1.13 and prior) that could allow a use-after-free condition which could result in remote code execution when a malicious SSD file is uploaded and improperly parsed.

CVE-2025-13845P3HIGHCVSS 7.8≤ 2.8.1.0300≤ 2.8.2.0000+5 more2026-01-15

CVE-2025-13845 [HIGH] CWE-416 CVE-2025-13845: CWE-416: Use After Free vulnerability that could cause remote code execution when the end user impor CWE-416: Use After Free vulnerability that could cause remote code execution when the end user imports the malicious project file (SSD file) into Rapsody.

CVE-2025-13844P4MEDIUMCVSS 5.3≤ 2.8.1≤ 2.8.3+3 more2026-01-15

CVE-2025-13844 [MEDIUM] CWE-415 CVE-2025-13844: CWE-415: Double Free vulnerability exists that could cause heap memory corruption when the end user CWE-415: Double Free vulnerability exists that could cause heap memory corruption when the end user imports a malicious project file (SSD file) shared by the attacker into Rapsody.