Description
CWE-121: Stack-based Buffer Overflow vulnerability exists that could cause local attackers being able to
exploit these issues to potentially execute arbitrary code while the end user opens a malicious project file (SSD
file) provided by the attacker.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schneider Electric | EcoStruxure™ Power Build Rapsody software | v2.7.12 FR and prior | — |
Advisories 3
- ICSA-25-135-20 Schneider Electric EcoStruxure Power Build Rapsody CISA ICS & IT advisories · May 15, 2025
- ICSA-25-153-02 Schneider Electric EcoStruxure Power Build Rapsody CISA ICS & IT advisories · May 13, 2025
- SEVD-2025-133-03 EcoStruxure Power Build Rapsody Schneider Electric CPCERT · May 13, 2025