Skip to content
OpenAdvisories
Medium · 4.6 CVE-2024-11139 EUVD-2024-34383GHSA-4v9c-v72w-vwjh

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could allow local attackers to e…

Published Jan 17, 2025 · Updated Feb 12, 2025 · Assigned by schneider

Vendor: Schneider Electric Product: EcoStruxure Power Build Rapsody Category: ICS / OT

Description

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that
could allow local attackers to exploit these issues to potentially execute arbitrary code when opening a
malicious project file.

Affected products

VendorProductAffectedFixed
Schneider Electric EcoStruxure™ Power Build Rapsody Version v2.5.2 NL and prior, Version v2.7.1 FR and prior, Version v2.7.5 ES and prior, Version v2.5.4 INT and prior —

Advisories 2

References