CISA + Hersteller
ICS-Advisories
Advisories speziell für industrielle Steuerungssysteme — von CISA ICS-CERT und direkt von Herstellern (darunter Siemens, ABB, Schneider Electric, WAGO und Phoenix Contact) — einschließlich Revisionshistorie (Erstveröffentlichung, Update A, Update B) und verknüpfter CVEs.
1
Gefunden
Advisory-Daten: Live-Anbindung— zuletzt abgerufen: 7. November 2026 um 23:06.
Filter
1 aktiv1 Advisories gefunden
SEVD-2026-013-04
Multiple Vulnerabilities on EcoStruxure Power Build Rapsody
Schneider Electric — EcoStruxure Power Build Rapsody software
Veröffentlicht
13. Januar 2026
Letzte Aktualisierung
10. März 2026
Verknüpfte CVEs
Betroffene Sektoren
Risk Evaluation
Schneider Electric is aware of a vulnerability in its EcoStruxure Power Build Rapsody software. The [EcoStruxure Power Build Rapsody](https://www.se.com/ww/en/product-country-selector/?pageType=product-range&sourceId=2309) is used to enter or import the single line diagram, to get the extensive bill of material of your switchboard, including all devices, connection items, and mounting components. Failure to apply the mitigations/remediations provided below may risk memory corruption, heap-based buffer overflow, stack-based buffer overflow, which could result in local attackers being able to exploit these issues to potentially execute arbitrary code.
Zusammenfassung der Gegenmaßnahmen
Versions FR V2.8.1.0401, INT V2.8.6.200, and ES V2.8.5.0301 of EcoStruxure™ Power Build Rapsody includes a fix for the CVE-2025-13844 vulnerability and is available for download here: https://www.se.com/ww/en/product-country-selector/?pageType=product-range&sourceId=2309 Please restart the service after installing the new version.
Revisionshistorie (2)
Erstveröffentlichung — 13. Januar 2026
Original Release
Update A — 10. März 2026
Removed the link to the fix for Rapsody Belgium version, which was privately communicated to impacted users