IM
IronMonkey Threat Research
‹ Back to ICS Advisories

SEVD-2025-133-03 — EcoStruxure™ Power Build Rapsody

MEDIUM
CVSS 5.3
Date 2026-10-16T20:32:01+00:00
Source schneider-electric
Published by Schneider Electric

// Description

# Schneider Electric Security Notification 13-May-25 Document Reference Number – SEVD-2025-133-03 Page 1 of 4 > Public ## EcoStruxure™ Power Build Rapsody 13 May 2025 ## Overview Schneider Electric is aware of a vulnerability in its EcoStruxure™ Power Build Rapsody software. EcoStruxure Power Build Rapsody product is used to enter or import the single line diagram, to get the extensive bill of material of switchboards, including all devices, connection items, and mounting components. Failure to apply the remediations provided below may risk memory corruption, heap-based buffer overflow, stack-based buffer overflow, which could result in local attackers being able to exploit these issues to potentially execute arbitrary code. ## Affected Products and Versions Product Version EcoStruxure™ Power Build Rapsody software v2.7.12 FR and prior ## Vulnerability Details CVE ID: CVE-2025-3916 CVSS v3.1 Base Score 5.3 | Medium | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L CVSS v4.0 Base Score 4.6 | Medium | CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N CWE-121: Stack-based Buffer Overflow vulnerability exists that could cause local attackers being able to exploit these issues to potentially execute arbitrary code while the end user opens a malicious project file (SSD file) provided by the attacker.

// Vulnerabilities (1)

CVE ID CVSS Score Severity Description
CVE-2025-3916 5.3 medium
A CWE-121 Stack-based Buffer Overflow vulnerability exists that could cause local attackers being able to exploit these issues to potentially execute arbitrary code while the end user opens a malicious project file (SSD file) provided by the attacker.

// Affected Products (2)

Vendor Product Asset Type Purdue Level Firmware
Schneider Electric Schneider Electric EcoStruxure Power Build Rapsody engineering_workstation
L3
--
Schneider Electric Schneider Electric EcoStruxure™ Power Build Rapsody software engineering_workstation
L3
--

// Remediations (20)

Mitigation: Scan all methods of mobile data exchange with the isolated network such as CDs, USB drives, etc. bef
Scan all methods of mobile data exchange with the isolated network such as CDs, USB drives, etc. before use in the terminals or any node connected to these networks.
Mitigation: Store the project files in a secure storage and restrict the access to only trusted users.
Store the project files in a secure storage and restrict the access to only trusted users.
Mitigation: Never allow laptops that have connected to any other network besides the intended network to connect
Never allow laptops that have connected to any other network besides the intended network to connect to the safety or control networks without proper sanitation.
Mitigation: Never connect programming software to any network other than the network for the devices that it is
Never connect programming software to any network other than the network for the devices that it is intended.
Patch: EcoStruxure Power Build Rapsody: Version v2.8.2 FR of EcoStruxure Power Build Rapsody includes a fix
EcoStruxure Power Build Rapsody: Version v2.8.2 FR of EcoStruxure Power Build Rapsody includes a fix for this vulnerability and is available for download.
Mitigation: Schneider Electric has identified the following specific workarounds and mitigations users can apply
Schneider Electric has identified the following specific workarounds and mitigations users can apply to reduce risk:
Mitigation: Minimize network exposure for all control system devices and systems, and ensure that they are not a
Minimize network exposure for all control system devices and systems, and ensure that they are not accessible from the Internet.
Mitigation: Locate control and safety system networks and remote devices behind firewalls and isolate them from
Locate control and safety system networks and remote devices behind firewalls and isolate them from the business network.
Mitigation: Compute a hash of the project files and regularly check the consistency of this hash to verify the i
Compute a hash of the project files and regularly check the consistency of this hash to verify the integrity before usage.
Mitigation: Encrypt project files when stored.
Encrypt project files when stored.
Mitigation: When exchanging files over the network, use secure communication protocols.
When exchanging files over the network, use secure communication protocols.
Mitigation: When remote access is required, use secure methods, such as virtual private networks (VPNs). Recogni
When remote access is required, use secure methods, such as virtual private networks (VPNs). Recognize that VPNs may have vulnerabilities and should be updated to the most current version available. Also, understand that VPNs are only as secure as the connected devices.
Mitigation: Only open project files received from a trusted source.
Only open project files received from a trusted source.
Mitigation: Install physical controls so no unauthorized personnel can access your industrial control and safety
Install physical controls so no unauthorized personnel can access your industrial control and safety systems, components, peripheral equipment, and networks.
Mitigation: For more information, see Schneider Electric security notification SEVD-2025-133-03.
For more information, see Schneider Electric security notification SEVD-2025-133-03.
Mitigation: Schneider Electric strongly recommends the following industry cybersecurity best practices:
Schneider Electric strongly recommends the following industry cybersecurity best practices:
Patch: Harden the workstation running EcoStruxure Power Build Rapsody
Harden the workstation running EcoStruxure Power Build Rapsody
Mitigation: Place all controllers in locked cabinets and never leave them in the "Program" mode.
Place all controllers in locked cabinets and never leave them in the "Program" mode.
Mitigation: If customers choose not to apply the remediation provided above, they should immediately apply the f
If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: • Store the project files in a secure storage and restrict the access to only trusted users • When exchanging files over the network, use secure communication protocols • Encrypt project files when stored • Only open project files received from trusted source • Compute a hash of the project files and regularly check the consistency of this hash to verify the integrity before usage • Harden the workstation running EcoStruxure™ Power Build Rapsody To ensure you are informed of all updates, including details on affected products and remediation plans, subscribe to Schneider Electric’s security notification service here: https://www.se.com/en/work/support/cybersecurity/security-notifications.jsp
Patch: Version v2.8.1 FR of EcoStruxure™ Power Build–Rapsody includes a fix for this vulnerability and is
Version v2.8.1 FR of EcoStruxure™ Power Build–Rapsody includes a fix for this vulnerability and is available for download here: https://www.se.com/ww/en/product-range/2309-ecostruxure-power-buildrapsody/#overview Please reboot after installing the new version.

// References