CVE-2025-13844

High CVSS: 8.4

CWE-415: Double Free vulnerability exists that could cause heap memory corruption when the end user imports a malicious project file (SSD file) shared by the attacker into Rapsody.

Vendor

Schneider-electric

Product

Ecostruxure Power Build - Rapsody

CWE

CWE-415

Yayın Tarihi

2026-01-15 19:16:02

Güncelleme

2026-03-03 16:44:40

Source Identifier

cybersecurity@se.com

KEV Date Added

Kategoriler

CWE-415 Ecostruxure Power Build - Rapsody HIGH Schneider-electric 2026

Referanslar

https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2026-013-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2026-013-04.pdf