CVE-2021-22697

2021-01-2517:09:26

CWE-434

schneider

www.cve.org

cwe-434

ecostruxure power build

rapsody software

use-after-free

remote code execution

malicious file upload

EPSS

0.009

Percentile

82.5%

JSON

A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists in the EcoStruxure Power Build - Rapsody software (V2.1.13 and prior) that could allow a use-after-free condition which could result in remote code execution when a malicious SSD file is uploaded and improperly parsed.

CNA Affected

[
  {
    "product": " EcoStruxure Power Build - Rapsody software V2.1.13 and prior. ",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "EcoStruxure Power Build - Rapsody software V2.1.13 and prior."
      }
    ]
  }
]