CVE-2025-3916: Schneider Electric Ecostruxure Power Build Rapsody Software

Medium severity, CVSS 4.6. EPSS: 0.2% chance of exploitation in the next 30 days.

CWE-121: Stack-based Buffer Overflow vulnerability exists that could cause local attackers being able to exploit these issues to potentially execute arbitrary code while the end user opens a malicious project file (SSD file) provided by the attacker.

Affected products

• Schneider Electric Ecostruxure Power Build Rapsody Software: up to and including v2.7.12 FR

Published 2025-05-13. Last modified 2026-06-17.