CVE-2021-22698: Schneider Electric Ecostruxure Power Build - Rapsody

High severity, CVSS 7.8. EPSS: 3.9% chance of exploitation in the next 30 days.

A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists in the EcoStruxure Power Build - Rapsody software (V2.1.13 and prior) that could allow a stack-based buffer overflow to occur which could result in remote code execution when a malicious SSD file is uploaded and improperly parsed.

Affected products

• Schneider Electric Ecostruxure Power Build - Rapsody: up to and including 2.1.13

Published 2021-01-26. Last modified 2026-06-17.