ZDI-26-091
HIGH 7.8
Published
Feb 12, 2026
Schneider Electric EcoStruxure Power Build SSD File Parsing Memory Corruption Remote Code Execution Vulnerability
Schneider
CVE-2025-13845 is a high-severity remote code execution vulnerability in Schneider Electric EcoStruxure Power Build that allows attackers to execute arbitrary code if a user visits a malicious page or opens a malicious file. Security teams should prioritize patching this vulnerability and implement user awareness training to prevent users from accessing untrusted content, as exploitation requires user interaction but poses significant risk with a CVSS score of 7.8.