CVE-2025-13845: Schneider Electric Ecostruxure Power Build - Rapsody

High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days.

CWE-416: Use After Free vulnerability that could cause remote code execution when the end user imports the malicious project file (SSD file) into Rapsody.

Affected products

• Schneider Electric Ecostruxure Power Build - Rapsody: up to and including 2.8.1.0300; up to and including 2.8.2.0000; up to and including 2.8.3.0100; up to and including 2.8.4.0300; up to and including 2.8.5.0200; up to and including 2.8.7.0100; …

Published 2026-01-15. Last modified 2026-09-03.