CISA + leveranciers
ICS Advisories
Advisories specifiek gericht op industriële besturingssystemen — van CISA ICS-CERT en rechtstreeks van leveranciers (onder meer Siemens, ABB, Schneider Electric, WAGO en Phoenix Contact) — inclusief revisiegeschiedenis (initiële publicatie, Update A, Update B) en gekoppelde CVE's.
1
Gevonden
Advisorydata: live koppeling— laatst opgehaald: 7 november 2026 om 22:05.
Filters
1 actief1 advisories gevonden
SEVD-2026-013-04
Multiple Vulnerabilities on EcoStruxure Power Build Rapsody
Schneider Electric — EcoStruxure Power Build Rapsody software
Gepubliceerd
13 januari 2026
Laatste update
10 maart 2026
Gekoppelde CVE's
Getroffen sectoren
Risk evaluation
Schneider Electric is aware of a vulnerability in its EcoStruxure Power Build Rapsody software. The [EcoStruxure Power Build Rapsody](https://www.se.com/ww/en/product-country-selector/?pageType=product-range&sourceId=2309) is used to enter or import the single line diagram, to get the extensive bill of material of your switchboard, including all devices, connection items, and mounting components. Failure to apply the mitigations/remediations provided below may risk memory corruption, heap-based buffer overflow, stack-based buffer overflow, which could result in local attackers being able to exploit these issues to potentially execute arbitrary code.
Mitigatiesamenvatting
Versions FR V2.8.1.0401, INT V2.8.6.200, and ES V2.8.5.0301 of EcoStruxure™ Power Build Rapsody includes a fix for the CVE-2025-13844 vulnerability and is available for download here: https://www.se.com/ww/en/product-country-selector/?pageType=product-range&sourceId=2309 Please restart the service after installing the new version.
Revisiegeschiedenis (2)
Initiële publicatie — 13 januari 2026
Original Release
Update A — 10 maart 2026
Removed the link to the fix for Rapsody Belgium version, which was privately communicated to impacted users