CVE-2025-13844 — Schneider Electric / EcoStruxure Power Build Rapsody

CVE-2025-13844

Schneider Electric / EcoStruxure Power Build Rapsody PUBLISHED

Description (CNA)

CWE-415: Double Free vulnerability exists that could cause heap memory corruption when the end user imports a malicious project file (SSD file) shared by the attacker into Rapsody.

Affected (CNA)

Vendor / product	Versions
Schneider Electric / EcoStruxure Power Build Rapsody	affected FR v2.8.1 and prior; affected INT v2.8.6 and prior; affected ES v2.8.5 and prior; affected BEL (NL) v2.8.3 and prior; affected BEL (FR) v2.8.8 and prior

CWE

CWE-415

References

https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2026-013-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2026-013-04.pdf

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.