CVE-2021-22698CWE-434

CVE-2021-22698: vulnerability in EcoStruxure Power Build - Rapsody software V2.1.

Published · Updated

Follow this CVE+ Monitor EcoStruxure Power Build - Rapsody software V2.1.13 and prior.

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 4.0%
A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists in the EcoStruxure Power Build - Rapsody software (V2.1.13 and prior) that could allow a stack-based buffer overflow to occur which could result in remote code execution when a malicious SSD file is uploaded and improperly parsed.
Affected products
n/a · EcoStruxure Power Build - Rapsody software V2.1.13 and prior.