Schneider Electric Ecostruxure Power Build Rapsody vulnerabilities

3 known vulnerabilities affecting schneider_electric/ecostruxure_power_build_rapsody.

Total CVEs

3

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH2MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2025-13844HIGHCVSS 8.4vFR v2.8.1 and priorvINT v2.8.6 and prior+3 more2026-01-15

CVE-2025-13844 [HIGH] CWE-415 CVE-2025-13844: CWE-415: Double Free vulnerability exists that could cause heap memory corruption when the end user CWE-415: Double Free vulnerability exists that could cause heap memory corruption when the end user imports a malicious project file (SSD file) shared by the attacker into Rapsody.

CVE-2025-13845HIGHCVSS 8.4vFR v2.8.1.0300 and priorvESP v2.8.5.0200 and prior+5 more2026-01-15

CVE-2025-13845 [HIGH] CWE-416 CVE-2025-13845: CWE-416: Use After Free vulnerability that could cause remote code execution when the end user impor CWE-416: Use After Free vulnerability that could cause remote code execution when the end user imports the malicious project file (SSD file) into Rapsody.

CVE-2024-11139MEDIUMCVSS 4.6vVersion v2.5.2 NL and priorvVersion v2.7.1 FR and prior+2 more2025-01-17

CVE-2024-11139 [MEDIUM] CWE-119 CVE-2024-11139: CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exist CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could allow local attackers to exploit these issues to potentially execute arbitrary code when opening a malicious project file.