ZDI-26-089 HIGH 7.8 Published Feb 12, 2026

Schneider Electric EcoStruxure Power Build SSD File Parsing Memory Corruption Remote Code Execution Vulnerability

Schneider

Schneider Electric EcoStruxure Power Build contains a remote code execution vulnerability (CVE-2025-13845) that allows attackers to execute arbitrary code if a user opens a malicious file or visits a compromised webpage. This is a high-severity issue with a CVSS score of 7.8 that could give attackers full system control. Security teams should prioritize patching this product, implement user awareness training to prevent social engineering attacks, and consider restricting file types or web access for users who interact with this software.

Related CVEs

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy