CVE 8.4 HIGH

CVE-2025-13845_CVE-2025-13845

8.4 / 10
HIGH
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Description

CWE-416: Use After Free vulnerability that could cause remote code execution when the end user imports the malicious project file (SSD file) into Rapsody.

Basic Information

ID CVE-2025-13845
Source schneider
Published Jan 15, 2026 at 18:33

Affected Product

Vendor Schneider Electric
Product EcoStruxure Power Build Rapsody
Version FR v2.8.1.0300 and prior
Affected Versions Schneider Electric EcoStruxure Power Build Rapsody FR v2.8.1.0300 and prior
Schneider Electric EcoStruxure Power Build Rapsody ESP v2.8.5.0200 and prior
Schneider Electric EcoStruxure Power Build Rapsody PT v2.8.7.0100 and prior
Schneider Electric EcoStruxure Power Build Rapsody BEL (FR) v2.8.8.0100 and prior
Schneider Electric EcoStruxure Power Build Rapsody BEL (EN) v2.8.3.0100 and prior
Schneider Electric EcoStruxure Power Build Rapsody INT (EN) v2.8.4.0300 and prior
Schneider Electric EcoStruxure Power Build Rapsody NL v2.8.2.0000 and prior

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.