Description
CWE-416: Use After Free vulnerability that could cause remote code execution when the end user imports the malicious project file (SSD file) into Rapsody.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schneider Electric | EcoStruxure Power Build Rapsody | FR v2.8.1.0300 and prior, ESP v2.8.5.0200 and prior, PT v2.8.7.0100 and prior, BEL (FR) v2.8.8.0100 and prior, BEL (EN) v2.8.3.0100 and prior, INT (EN) v2.8.4.0300 and prior, NL v2.8.2.0000 and prior | — |
Advisories 2
- ICSA-26-015-10 Schneider Electric EcoStruxure Power Build Rapsody (Update A) CISA ICS & IT advisories · Mar 17, 2026
- SEVD-2026-013-04 Multiple Vulnerabilities on EcoStruxure Power Build Rapsody Schneider Electric CPCERT · Mar 10, 2026