8.4
/ 10
HIGH
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L
Description
CWE-415: Double Free vulnerability exists that could cause heap memory corruption when the end user imports a malicious project file (SSD file) shared by the attacker into Rapsody.
Basic Information
ID
CVE-2025-13844
Source
schneider
Published
Jan 15, 2026 at 18:28
Affected Product
Vendor
Schneider Electric
Product
EcoStruxure Power Build Rapsody
Version
FR v2.8.1 and prior
Affected Versions
Schneider Electric EcoStruxure Power Build Rapsody FR v2.8.1 and prior
Schneider Electric EcoStruxure Power Build Rapsody INT v2.8.6 and prior
Schneider Electric EcoStruxure Power Build Rapsody ES v2.8.5 and prior
Schneider Electric EcoStruxure Power Build Rapsody BEL (NL) v2.8.3 and prior
Schneider Electric EcoStruxure Power Build Rapsody BEL (FR) v2.8.8 and prior
Schneider Electric EcoStruxure Power Build Rapsody INT v2.8.6 and prior
Schneider Electric EcoStruxure Power Build Rapsody ES v2.8.5 and prior
Schneider Electric EcoStruxure Power Build Rapsody BEL (NL) v2.8.3 and prior
Schneider Electric EcoStruxure Power Build Rapsody BEL (FR) v2.8.8 and prior