https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 15:26:04 +0000 https://cve.radiocsirt.org/vuln/bdu:2021-01110 bdu:2021-01110 https://cve.radiocsirt.org/vuln/bdu:2021-01110 https://cve.radiocsirt.org/vuln/certfr-2021-avi-024 certfr-2021-avi-024 https://cve.radiocsirt.org/vuln/certfr-2021-avi-024 https://cve.radiocsirt.org/vuln/cnvd-2021-31180 cnvd-2021-31180 https://cve.radiocsirt.org/vuln/cnvd-2021-31180 https://cve.radiocsirt.org/vuln/euvd-2026-23122 EUVD-2026-23122 https://cve.radiocsirt.org/vuln/euvd-2026-23122 https://cve.radiocsirt.org/vuln/fkie_cve-2021-22697 <p>A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists in the EcoStruxure Power Build - Rapsody software (V2.1.13 and prior) that could allow a use-after-free condition which could result in remote code execution when a malicious SSD file is uploaded and improperly parsed.</p> <p>A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists in the EcoStruxure Power Build - Rapsody software (V2.1.13 and prior) that could allow a use-after-free condition which could result in remote code execution when a malicious SSD file is uploaded and improperly parsed.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-22697 https://cve.radiocsirt.org/vuln/ghsa-wrwf-2jpv-j2gv <p>A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists in the EcoStruxure Power Build - Rapsody software (V2.1.13 and prior) that could allow a use-after-free condition which could result in remote code execution when a malicious SSD file is uploaded and improperly parsed.</p> <p>A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists in the EcoStruxure Power Build - Rapsody software (V2.1.13 and prior) that could allow a use-after-free condition which could result in remote code execution when a malicious SSD file is uploaded and improperly parsed.</p> https://cve.radiocsirt.org/vuln/ghsa-wrwf-2jpv-j2gv https://cve.radiocsirt.org/vuln/gsd-2021-22697 gsd-2021-22697 https://cve.radiocsirt.org/vuln/gsd-2021-22697 https://cve.radiocsirt.org/vuln/icsa-21-012-01 <p>A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists in the EcoStruxure Power Build - Rapsody software (V2.1.13 and prior) that could allow a use-after-free condition which could result in remote code execution when a malicious SSD file is uploaded and improperly parsed. When a malicious SSD file is uploaded and improperly parsed, an attacker could cause a use-after-free condition or stack-based buffer overflow resulting in remote code execution.</p> <p>A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists in the EcoStruxure Power Build - Rapsody software (V2.1.13 and prior) that could allow a use-after-free condition which could result in remote code execution when a malicious SSD file is uploaded and improperly parsed. When a malicious SSD file is uploaded and improperly parsed, an attacker could cause a use-after-free condition or stack-based buffer overflow resulting in remote code execution.</p> https://cve.radiocsirt.org/vuln/icsa-21-012-01 https://cve.radiocsirt.org/vuln/sevd-2021-012-02 <p>Schneider Electric is aware of multiple vulnerabilities in its EcoStruxure Power Build - Rapsody product. The EcoStruxure Power Build - Rapsody product is a LV switchboard configuration and quotation software to support users in the configuration and quotation process for Prisma switchboard projects in the non-critical building segment. Failure to apply the mitigations provided below may allow remote code execution which could result in serious interruption of business operations and exfiltration of credentials and other business sensitive data. June 2022 Update: Remediation added</p> <p>Schneider Electric is aware of multiple vulnerabilities in its EcoStruxure Power Build - Rapsody product. The EcoStruxure Power Build - Rapsody product is a LV switchboard configuration and quotation software to support users in the configuration and quotation process for Prisma switchboard projects in the non-critical building segment. Failure to apply the mitigations provided below may allow remote code execution which could result in serious interruption of business operations and exfiltration of credentials and other business sensitive data. June 2022 Update: Remediation added</p> https://cve.radiocsirt.org/vuln/sevd-2021-012-02