CNNVD-202601-2579 Information

CNNVD ID

CNNVD-202601-2579

CVE-2025-13844

  • CNNVD Published: 2026-01-15

Description (Chinese)

Schneider Electric EcoStruxure Power Build Rapsody是法国施耐德电气(Schneider Electric)公司的一个电源监控平台。 Schneider Electric EcoStruxure Power Build Rapsody存在资源管理错误漏洞,该漏洞源于导入恶意SSD文件时存在双重释放问题,可能导致堆内存损坏。

Description (English)

Schneider Electric EcoStruxure Power Build Rapsody is a power monitoring platform for Schneider Electric in France. Schneider Electric EcoStruxure Power Build Rapsody had a resource management error gap, which arose from a double release problem when the malicious SSD document was imported and could lead to damage to the memory.

Hazard Level

High

Vulnerability Type

资源管理错误

Affected Vendor

施耐德电气。

Published

2026-01-15

Last Modified

2026-02-24

References

https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2026-013-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2026-013-04.pdf

Patch

https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2026-013-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2026-013-04.pdf

Share on: