CVE-2024-11139 — Schneider Electric / EcoStruxure™ Power Build Rapsody

CVE-2024-11139

Schneider Electric / EcoStruxure™ Power Build Rapsody PUBLISHED

Description (CNA)

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could allow local attackers to exploit these issues to potentially execute arbitrary code when opening a malicious project file.

Affected (CNA)

Vendor / product	Versions
Schneider Electric / EcoStruxure™ Power Build Rapsody	affected Version v2.5.2 NL and prior; affected Version v2.7.1 FR and prior; affected Version v2.7.5 ES and prior; affected Version v2.5.4 INT and prior

CWE

CWE-119

References

https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2025-014-09&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2025-014-09.pdf

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.