Not rated

CVE-2021-22697 A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists in the EcoStruxure Power Build - Rapsody…

Description

A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists in the EcoStruxure Power Build - Rapsody software (V2.1.13 and prior) that could allow a use-after-free condition which could result in remote code execution when a malicious SSD file is uploaded and improperly parsed.

Affected products and versions

Product	Affected versions	Fixed in
EcoStruxure Power Build - Rapsody software V2.1.13 and prior.	Versions not published
EcoStruxure Power Build - Rapsody software V2.1.13 and prior.	Versions not published

The 2 CVEs of EcoStruxure Power Build - Rapsody software V2.1.13 and prior. →

CVE-2021-22698 A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists in the EcoStruxure Power Build - Rapsody… Not rated

Do you use EcoStruxure Power Build - Rapsody software V2.1.13 and prior. ?

Track this CVE Watch EcoStruxure Power Build - Rapsody software V2.1.13 and prior. Check my SBOMs

www.cveye.io/en/cve/CVE-2021-22697

Timeline

Published January 25, 2021
Last modified August 3, 2024

References

www.se.com www.se.com
www.zerodayinitiative.com www.zerodayinitiative.com
us-cert.cisa.gov us-cert.cisa.gov

Track this CVE

CVE-2021-22697 A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists in the EcoStruxure Power Build - Rapsody…

Description

Affected products and versions

Other CVEs of EcoStruxure Power Build - Rapsody software V2.1.13 and prior.