Vulnerability Details CVE-2025-13844
CWE-415: Double Free vulnerability exists that could cause heap memory corruption when the end user imports a malicious project file (SSD file) shared by the attacker into Rapsody.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 3.6%
CVSS Severity
CVSS v3 Score 5.3
Products affected by CVE-2025-13844
-
cpe:2.3:a:schneider-electric:ecostruxure_power_build_-_rapsody:2.8.1
-
cpe:2.3:a:schneider-electric:ecostruxure_power_build_-_rapsody:2.8.3
-
cpe:2.3:a:schneider-electric:ecostruxure_power_build_-_rapsody:2.8.5
-
cpe:2.3:a:schneider-electric:ecostruxure_power_build_-_rapsody:2.8.6
-
cpe:2.3:a:schneider-electric:ecostruxure_power_build_-_rapsody:2.8.8