Description
CWE-415: Double Free vulnerability exists that could cause heap memory corruption when the end user imports a malicious project file (SSD file) shared by the attacker into Rapsody.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schneider Electric | EcoStruxure Power Build Rapsody | FR v2.8.1 and prior, INT v2.8.6 and prior, ES v2.8.5 and prior, BEL (NL) v2.8.3 and prior, BEL (FR) v2.8.8 and prior | — |
Advisories 2
- ICSA-26-015-10 Schneider Electric EcoStruxure Power Build Rapsody (Update A) CISA ICS & IT advisories · Mar 17, 2026
- SEVD-2026-013-04 Multiple Vulnerabilities on EcoStruxure Power Build Rapsody Schneider Electric CPCERT · Mar 10, 2026