CVE-2025-13845

CWE-416: Use After Free vulnerability that could cause remote code execution when the end user imports the malicious project file (SSD file) into Rapsody.

Score

CVSS 4.0 8.4 High

Status

Analyzed - cybersecurity@se.com

Published

2026-01-15

Last modified

2026-01-15

Weaknesses

CWE-416

Affected products

• Ecostruxure Power Build - Rapsody (Schneider-electric)
• Ecostruxure Power Build Rapsody (Schneider Electric)

References

• https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2026-013-04&p_enDocType=Security+and+Safety+Notice&p_File_…