CNNVD-202601-2578 Information

CNNVD ID

CNNVD-202601-2578

CVE-2025-13845

  • CNNVD Published: 2026-01-15

Description (Chinese)

Schneider Electric EcoStruxure Power Build Rapsody是法国施耐德电气(Schneider Electric)公司的一个电源监控平台。 Schneider Electric EcoStruxure Power Build Rapsody存在资源管理错误漏洞,该漏洞源于导入恶意SSD文件时存在释放后重用问题,可能导致远程代码执行。

Description (English)

Schneider Electric EcoStruxure Power Build Rapsody is a power monitoring platform for Schneider Electric in France. Schneider Electric EcoStruxure Power Build Rapsody has a resource management error loophole, which stems from post-release reuse problems when importing malicious SSD files, which may lead to remote code implementation.

Hazard Level

Medium

Vulnerability Type

资源管理错误

Affected Vendor

施耐德电气。

Published

2026-01-15

Last Modified

2026-02-24

References

https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2026-013-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2026-013-04.pdf

Patch

https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2026-013-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2026-013-04.pdf

Share on: