CVE-2025-13844
CWE-415: Double Free vulnerability exists that could cause heap memory corruption when the end user imports a malicious project file (SSD file) shared by the attacker into Rapsody.
- Score
- CVSS 4.0 8.4 High
- Status
- Analyzed - cybersecurity@se.com
- Published
- 2026-01-15
- Last modified
- 2026-01-15
- Weaknesses
- CWE-415
Affected products
- Ecostruxure Power Build - Rapsody (Schneider-electric)
- Ecostruxure Power Build Rapsody (Schneider Electric)
References
- https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2026-013-04&p_enDocType=Security+and+Safety+Notice&p_File_…
