Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2025-3916 Details

ANALYZED

This CVE record has been analyzed and enriched by NVDAPI.com as an independent party.

Description

CWE-121: Stack-based Buffer Overflow vulnerability exists that could cause local attackers being able to exploit these issues to potentially execute arbitrary code while the end user opens a malicious project file (SSD file) provided by the attacker.

Metrics

CVSS 3.x Severity and Vector Strings:

VolerionCVSS-B:8.6 HIGHVector:CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2025-133-03&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2025-133-03.pdf	[email protected]	AdvisoryRemedyVendor

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-121	Stack-based Buffer Overflow	[email protected]

Affected Products

Product	Versions
Schneider Electric EcoStruxure Power Build Rapsody	<= 2.7.12 FR
CPE cpe:2.3:a:schneider-electric:ecostruxure_power_build_-_rapsody:::::::: cpe:2.3:a:se:ecostruxure_power_build_-_rapsody:::::::: Remediation Upgrade: 2.8.1 FRmoderate efforthttps://www.se.com/ww/en/product-range/2309-ecostruxure-power-build-rapsody/#overview Please reboot after installing the new version. Mitigation:low effort Store the project files in a secure storage and restrict the access to only trusted users. Mitigation:low effort When exchanging files over the network, use secure communication protocols. Mitigation:low effort Encrypt project files when stored. Mitigation:low effort Only open project files received from trusted source. Mitigation:low effort Compute a hash of the project files and regularly check the consistency of this hash to verify the integrity before usage. Mitigation:low effort Harden the workstation running EcoStruxureTM Power Build Rapsody.

Product

Versions

Schneider Electric EcoStruxure Power Build Rapsody

<= 2.7.12 FR

CPE

cpe:2.3:a:schneider-electric:ecostruxure_power_build_-_rapsody:*:*:*:*:*:*:*:*
cpe:2.3:a:se:ecostruxure_power_build_-_rapsody:*:*:*:*:*:*:*:*

Remediation

Upgrade: 2.8.1 FRmoderate efforthttps://www.se.com/ww/en/product-range/2309-ecostruxure-power-build-rapsody/#overview
Please reboot after installing the new version.
Mitigation:low effort
Store the project files in a secure storage and restrict the access to only trusted users.
Mitigation:low effort
When exchanging files over the network, use secure communication protocols.
Mitigation:low effort
Encrypt project files when stored.
Mitigation:low effort
Only open project files received from trusted source.
Mitigation:low effort
Compute a hash of the project files and regularly check the consistency of this hash to verify the integrity before usage.
Mitigation:low effort
Harden the workstation running EcoStruxureTM Power Build Rapsody.

Change History

3 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	[email protected]
Jun 17, 2026	CVE Modified	CISA-ADP
May 13, 2025	New CVE Received	[email protected]