CVE-2021-22698

2021-01-2517:10:12

CWE-434

schneider

www.cve.org

ecostruxure power build

rapsody software

v2.1.13

stack-based buffer overflow

cve-2021-22698

remote code execution

malicious ssd file

EPSS

0.008

Percentile

81.5%

JSON

A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists in the EcoStruxure Power Build - Rapsody software (V2.1.13 and prior) that could allow a stack-based buffer overflow to occur which could result in remote code execution when a malicious SSD file is uploaded and improperly parsed.

CNA Affected

[
  {
    "product": " EcoStruxure Power Build - Rapsody software V2.1.13 and prior. ",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "EcoStruxure Power Build - Rapsody software V2.1.13 and prior."
      }
    ]
  }
]