Description
CWE- 416: Use After Free vulnerability exists that could cause arbitrary code execution when a local attacker could trick the end user to open a specially crafted malicious SSD file.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schneider Electric | EcoStruxure™ Power Build Rapsody | NL-V2.8.2.0000 and prior | — |
| Schneider Electric | EcoStruxure™ Power Build Rapsody | INT(EN)-V2.8.4.0401 and prior | — |
| Schneider Electric | EcoStruxure™ Power Build Rapsody | INT(FR)-V2.8.6.0000 and prior | — |
| Schneider Electric | EcoStruxure™ Power Build Rapsody | ESP-V2.8.5.0301 and prior | — |
| Schneider Electric | EcoStruxure™ Power Build Rapsody | PT-V2.8.7.0101 and prior | — |
| Schneider Electric | EcoStruxure™ Power Build Rapsody | BEL(FR)-V2.8.8.0201 and prior | — |
| Schneider Electric | EcoStruxure™ Power Build Rapsody | BEL(EN)-V2.8.3.0201 and prior | — |
| Schneider Electric | EcoStruxure™ Power Build Rapsody | FR-V2.9.1.0 and prior | — |
Advisories 1
- SEVD-2026-314-01 Use After Free vulnerability on EcoStruxure™ Power Build Rapsody Schneider Electric CPCERT · Nov 10, 2026