Skip to content
CVE PROGRAM SOURCE RECORD8.4 High

CVE-2025-13845

CWE-416: Use After Free vulnerability that could cause remote code execution when the end user imports the malicious project file (SSD file) into Rapsody.

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
schneider

Description

CWE-416: Use After Free vulnerability that could cause remote code execution when the end user imports the malicious project file (SSD file) into Rapsody.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Schneider Electric EcoStruxure Power Build Rapsody

Default version status: unaffected

  • FR v2.8.1.0300 and prioraffected
  • ESP v2.8.5.0200 and prioraffected
  • PT v2.8.7.0100 and prioraffected
  • BEL (FR) v2.8.8.0100 and prioraffected
  • BEL (EN) v2.8.3.0100 and prioraffected
  • INT (EN) v2.8.4.0300 and prioraffected
  • NL v2.8.2.0000 and prioraffected

References