Skip to content
OpenAdvisories
High ICSA-21-012-01 2 CVEs

Schneider Electric EcoStruxure Power Build-Rapsody (Update A)

Published Jan 12, 2021 · Updated Feb 18, 2021 · Revision 2

Vendor: Schneider Electric Product: EcoStruxure™ Power Build Rapsody software

Summary

Successful exploitation of this vulnerability could allow a local attacker to upload a malicious SSD file, resulting in a use-after-free condition or a stack-based buffer overflow.

Vulnerabilities 2

  • Unscored —
    CVE-2021-22697

    A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists in the EcoStruxure Power Build - Rapsod…

  • Unscored —
    CVE-2021-22698

    A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists in the EcoStruxure Power Build - Rapsod…

Revision history

  1. #2

    ICSA-21-012-01 Schneider Electric EcoStruxure Power Build-Rapsody (Update A)

  2. #1

    ICSA-21-012-01 Schneider Electric EcoStruxure Power Build - Rapsody

References