7.8

CVE-2025-13845

CWE-416: Use After Free vulnerability that could cause remote code execution when the end user imports the malicious project file (SSD file) into Rapsody.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Schneider-electric ≫ Ecostruxure Power Build - Rapsody SwEdition fr Version <= 2.8.1.0300
Schneider-electric ≫ Ecostruxure Power Build - Rapsody SwEdition nl Version <= 2.8.2.0000
Schneider-electric ≫ Ecostruxure Power Build - Rapsody SwEdition bel_en Version <= 2.8.3.0100
Schneider-electric ≫ Ecostruxure Power Build - Rapsody SwEdition int_en Version <= 2.8.4.0300
Schneider-electric ≫ Ecostruxure Power Build - Rapsody SwEdition esp Version <= 2.8.5.0200
Schneider-electric ≫ Ecostruxure Power Build - Rapsody SwEdition pt Version <= 2.8.7.0100
Schneider-electric ≫ Ecostruxure Power Build - Rapsody SwEdition bel_fr Version <= 2.8.8.0100
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.32% 0.244
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
SE.com 8.4 0 0
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CWE-416 Use After Free

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2026-013-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2026-013-04.pdf
Vendor Advisory