ZDI-26-089
HIGH 7.8
Published
Feb 12, 2026
Schneider Electric EcoStruxure Power Build SSD File Parsing Memory Corruption Remote Code Execution Vulnerability
Schneider
Schneider Electric EcoStruxure Power Build contains a remote code execution vulnerability (CVE-2025-13845) that allows attackers to execute arbitrary code if a user opens a malicious file or visits a compromised webpage. This is a high-severity issue with a CVSS score of 7.8 that could give attackers full system control. Security teams should prioritize patching this product, implement user awareness training to prevent social engineering attacks, and consider restricting file types or web access for users who interact with this software.