ZDI-26-092 HIGH 7.8 Published Feb 12, 2026

Schneider Electric EcoStruxure Power Build SSD File Parsing Memory Corruption Remote Code Execution Vulnerability

Schneider

A remote code execution vulnerability (CVE-2025-13845) has been discovered in Schneider Electric EcoStruxure Power Build with a CVSS score of 7.8, requiring users to interact with malicious content such as a webpage or file to trigger the exploit. An attacker can execute arbitrary code on vulnerable systems by tricking users into visiting compromised sites or opening malicious files. Security teams should prioritize patching this product and educate users to avoid suspicious links and attachments until updates are available.

Related CVEs

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy