CVE-2025-13844 — MEDIUM (5.3)

Q: What is CVE-2025-13844?

CVE-2025-13844 is a vulnerability with a CVSS score of 5.3 (MEDIUM). CWE-415: Double Free vulnerability exists that could cause heap memory corruption when the end user imports a malicious project file (SSD file) shared by the attacker into Rapsody.

Q: How severe is CVE-2025-13844?

CVE-2025-13844 has been rated MEDIUM with a CVSS base score of 5.3/10. Review the CVSS metrics above for detailed severity breakdown.

Q: Is there a patch for CVE-2025-13844?

Check the references section above for vendor advisories and patch information. Affected products include: Schneider-Electric Ecostruxure Power Build - Rapsody.

Vulnerability Description

CWE-415: Double Free vulnerability exists that could cause heap memory corruption when the end user imports a malicious project file (SSD file) shared by the attacker into Rapsody.

CVSS Score

5.3

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality

LOW

Integrity

LOW

Availability

LOW

Affected Products

Vendor	Product	Versions
Schneider-Electric	Ecostruxure Power Build - Rapsody	<= 2.8.1

Related Weaknesses (CWE)

CWE-415

References

https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2026-013-04&p_enDocVendor Advisory

FAQ

What is CVE-2025-13844?

CVE-2025-13844 is a vulnerability with a CVSS score of 5.3 (MEDIUM). CWE-415: Double Free vulnerability exists that could cause heap memory corruption when the end user imports a malicious project file (SSD file) shared by the attacker into Rapsody.

How severe is CVE-2025-13844?

CVE-2025-13844 has been rated MEDIUM with a CVSS base score of 5.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2025-13844?

Check the references section above for vendor advisories and patch information. Affected products include: Schneider-Electric Ecostruxure Power Build - Rapsody.