Medium severity · published Jan 17, 2025
CVE-2024-11139
CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could allow local attackers to exploit these issues to potentially…
4.6
CVSS
0.2%
EPSS
No
On KEV
Description
CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that
could allow local attackers to exploit these issues to potentially execute arbitrary code when opening a
malicious project file.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 14% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EP
EcoStruxure™ Power Build Rapsody · Schneider Electric
Version v2.5.2 NL and prior; Version v2.7.1 FR and prior; Version v2.7.5 ES and prior; Version v2.5.4 INT and prior · source: vendor
Affected product
EP
EcoStruxure™ Power Build Rapsody
Schneider Electric
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-11139
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-11139
download.schneider-electric.com
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2025-014-09&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2025-014-09.pdf
More from EcoStruxure™ Power Build Rapsody
7.8
CVE-2025-13845
CWE-416: Use After Free vulnerability that could cause remote code execution when the end user imports the malicious project file (SSD file) into Rapsody
7.8
CVE-2021-22698
A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists in the EcoStruxure Power Build - Rapsody software (V2.1.13 and prior) that could allow a…
7.8
CVE-2021-22697
A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists in the EcoStruxure Power Build - Rapsody software (V2.1.13 and prior) that could allow a…
5.3
CVE-2025-13844
CWE-415: Double Free vulnerability exists that could cause heap memory corruption when the end user imports a malicious project file (SSD file) shared by the attacker into Rapsody