Vulnerability Details CVE-2025-13845
CWE-416: Use After Free vulnerability that could cause remote code execution when the end user imports the malicious project file (SSD file) into Rapsody.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 22.5%
CVSS Severity
CVSS v3 Score 7.8
Products affected by CVE-2025-13845
-
cpe:2.3:a:schneider-electric:ecostruxure_power_build_-_rapsody:2.8.1
-
cpe:2.3:a:schneider-electric:ecostruxure_power_build_-_rapsody:2.8.1.0300
-
cpe:2.3:a:schneider-electric:ecostruxure_power_build_-_rapsody:2.8.2.0000
-
cpe:2.3:a:schneider-electric:ecostruxure_power_build_-_rapsody:2.8.3.0100
-
cpe:2.3:a:schneider-electric:ecostruxure_power_build_-_rapsody:2.8.4.0300
-
cpe:2.3:a:schneider-electric:ecostruxure_power_build_-_rapsody:2.8.5.0200
-
cpe:2.3:a:schneider-electric:ecostruxure_power_build_-_rapsody:2.8.7.0100
-
cpe:2.3:a:schneider-electric:ecostruxure_power_build_-_rapsody:2.8.8
-
cpe:2.3:a:schneider-electric:ecostruxure_power_build_-_rapsody:2.8.8.0100