Lucene search
+L

40 matches found

BDU FSTEC
BDU FSTEC
added 2025/02/10 12:0 a.m.10 views

The vulnerability of Schneider Electric EcoStruxure Power Build Rapsody software for designing and configuring electrical systems lies in the fact that operations may occur outside the buffer boundaries of memory, allowing an attacker to execute arbitrary code.

The vulnerability of Schneider Electric EcoStruxure Power Build Rapsody software for designing and configuring electrical systems lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

5.3CVSS6.3AI score0.00228EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/01/17 12:0 a.m.7 views

Schneider Electric EcoStruxure Power Build Rapsody 缓冲区错误漏洞

Schneider Electric EcoStruxure Power Build Rapsody is a power monitoring platform from Schneider Electric France. Schneider Electric EcoStruxure Power Build Rapsody suffers from a buffer error vulnerability that stems from the inclusion of a memory buffer in-bounds operation improperly restricted...

4.6CVSS7.5AI score0.00228EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/01/30 12:0 a.m.7 views

Schneider Electric EcoStruxure Power Build 路径遍历漏洞

Schneider Electric EcoStruxure Power Build is a power distribution management software from Schneider Electric, France. The software helps users design, build, commission, operate and maintain electrical installations. A path traversal vulnerability exists in versions of Schneider Electric...

9.8CVSS8.4AI score0.00776EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2021/03/03 12:0 a.m.7 views

The vulnerability of the online configuration software EcoStruxure Power Build lies in its ability to download unlimited amounts of dangerous files, allowing a hacker to execute arbitrary code.

The vulnerability of the online configuration software of EcoStruxure Power Build lies in the ability to download unlimited files of a malicious nature. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS7.5AI score0.0347EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/03/03 12:0 a.m.7 views

The vulnerability of the online configuration software EcoStruxure Power Build lies in its ability to download unlimited amounts of dangerous files, allowing a hacker to execute arbitrary code.

The vulnerability of the online configuration software of EcoStruxure Power Build lies in the ability to download unlimited files of a malicious nature. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS7.5AI score0.03873EPSS
SaveExploits0References4Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2021/02/10 12:0 a.m.27 views

Schneider Electric EcoStruxure Power Build SSD File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Schneider Electric EcoStruxure Power Build. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exist...

7.8CVSS5.4AI score0.03873EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/02/10 12:0 a.m.41 views

Schneider Electric EcoStruxure Power Build SSD File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Schneider Electric EcoStruxure Power Build. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exist...

7.8CVSS5.2AI score0.0347EPSS
SaveExploits0References1
OSV
OSV
added 2021/01/26 6:16 p.m.6 views

CVE-2021-22697

A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists in the EcoStruxure Power Build - Rapsody software V2.1.13 and prior that could allow a use-after-free condition which could result in remote code execution when a malicious SSD file is uploaded and improperly parsed...

7.8CVSS6.3AI score0.0347EPSS
SaveExploits0References3
NVD
NVD
added 2021/01/26 6:16 p.m.28 views

CVE-2021-22697

A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists in the EcoStruxure Power Build - Rapsody software V2.1.13 and prior that could allow a use-after-free condition which could result in remote code execution when a malicious SSD file is uploaded and improperly parsed...

7.8CVSS8AI score0.0347EPSS
SaveExploits0References3
OSV
OSV
added 2021/01/26 6:16 p.m.7 views

CVE-2021-22698

A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists in the EcoStruxure Power Build - Rapsody software V2.1.13 and prior that could allow a stack-based buffer overflow to occur which could result in remote code execution when a malicious SSD file is uploaded and...

7.8CVSS7.9AI score0.03873EPSS
SaveExploits0References3
NVD
NVD
added 2021/01/26 6:16 p.m.31 views

CVE-2021-22698

A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists in the EcoStruxure Power Build - Rapsody software V2.1.13 and prior that could allow a stack-based buffer overflow to occur which could result in remote code execution when a malicious SSD file is uploaded and...

7.8CVSS8.1AI score0.03873EPSS
SaveExploits0References3
Prion
Prion
added 2021/01/26 6:16 p.m.20 views

Design/Logic Flaw

A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists in the EcoStruxure Power Build - Rapsody software V2.1.13 and prior that could allow a use-after-free condition which could result in remote code execution when a malicious SSD file is uploaded and improperly parsed...

6.8CVSS8AI score0.0347EPSS
SaveExploits0References3Affected Software1
Prion
Prion
added 2021/01/26 6:16 p.m.12 views

Stack overflow

A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists in the EcoStruxure Power Build - Rapsody software V2.1.13 and prior that could allow a stack-based buffer overflow to occur which could result in remote code execution when a malicious SSD file is uploaded and...

6.8CVSS8.1AI score0.03873EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2021/01/25 5:10 p.m.33 views

CVE-2021-22698

A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists in the EcoStruxure Power Build - Rapsody software V2.1.13 and prior that could allow a stack-based buffer overflow to occur which could result in remote code execution when a malicious SSD file is uploaded and...

8.3AI score0.03873EPSS
SaveExploits0References3
CVE
CVE
added 2021/01/25 5:10 p.m.118 views

CVE-2021-22698

CVE-2021-22698 affects Schneider Electric EcoStruxure Power Build-Rapsody (V2.1.13 and prior). The issue is a CWE-434 Unrestricted Upload of File with Dangerous Type in SSD file parsing, caused by insufficient validation of user-supplied data length before copying to a fixed-length stack buffer, ...

7.8CVSS8.1AI score0.03873EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2021/01/25 5:9 p.m.40 views

CVE-2021-22697

A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists in the EcoStruxure Power Build - Rapsody software V2.1.13 and prior that could allow a use-after-free condition which could result in remote code execution when a malicious SSD file is uploaded and improperly parsed...

8.2AI score0.0347EPSS
SaveExploits0References3
CVE
CVE
added 2021/01/25 5:9 p.m.104 views

CVE-2021-22697

CVE-2021-22697 affects Schneider Electric EcoStruxure Power Build-Rapsody (versions up to 2.1.13). The issue is a CWE-434 Unrestricted Upload of File with Dangerous Type in SSD file parsing, leading to a use-after-free condition and potential remote code execution. Exploitation described as requi...

7.8CVSS7.9AI score0.0347EPSS
SaveExploits0References3Affected Software1
CNVD
CNVD
added 2021/01/18 12:0 a.m.11 views

Schneider Electric EcoStruxure Power Build-Rapsody Buffer Overflow Vulnerability

Schneider Electric EcoStruxure Power Build-Rapsody is a software for simplifying the configuration of low-voltage distribution panels from Schneider Electric France. A buffer overflow vulnerability exists in EcoStruxure Power Build-Rapsody version V2.1.13 and prior versions when parsing SSD files...

7.8CVSS7.6AI score0.03873EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/01/12 12:0 a.m.9 views

Schneider Electric EcoStruxure Power Build - Rapsody 代码问题漏洞

Schneider Electric EcoStruxure Power Build-Rapsody is a software for simplifying the configuration of low-voltage distribution panels from Schneider Electric France. A code issue vulnerability exists in EcoStruxure Power Build-Rapsody version V2.1.13 and prior versions, which arises from the...

7.8CVSS7.4AI score0.0347EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2021/01/12 12:0 a.m.9 views

Schneider Electric EcoStruxure Power Build - Rapsody 代码问题漏洞

Schneider Electric EcoStruxure Power Build-Rapsody is a software for simplifying the configuration of low-voltage distribution panels from Schneider Electric France. A buffer overflow vulnerability exists in EcoStruxure Power Build-Rapsody version V2.1.13 and prior versions when parsing SSD files...

7.8CVSS7.5AI score0.03873EPSS
SaveExploits0References6
Rows per page
Query Builder