high7.8
CVE-2025-13845
CWE-416: Use After Free vulnerability that could cause remote code execution when the end user imports the malicious project file (SSD file) into Rapsody.
Impact
CWE-416: Use After Free vulnerability that could cause remote code execution when the end user imports the malicious project file (SSD file) into Rapsody.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Schneider-Electric | Ecostruxure Power Build - Rapsody | through 2.8.1.0300 through 2.8.2.0000 through 2.8.3.0100 through 2.8.4.0300 through 2.8.5.0200 through 2.8.7.0100 |