Ecostruxure Power Build Rapsody (Schneider Electric) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-01-15. Vendor: Schneider Electric.

CVEs of Ecostruxure Power Build Rapsody

• CVE-2025-13844 - CVSS 8.4 (high), 2026-01-15: CWE-415: Double Free vulnerability exists that could cause heap memory corruption when the end user imports a malicious project file (SSD file) shared by the…
• CVE-2025-13845 - CVSS 8.4 (high), 2026-01-15: CWE-416: Use After Free vulnerability that could cause remote code execution when the end user imports the malicious project file (SSD file) into Rapsody.
• CVE-2024-11139 - CVSS 4.6 (medium), 2025-01-17: CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could allow local attackers to exploit these issues…