2 lines
3.1 KiB
JSON
2 lines
3.1 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"EcoStruxure™ Power Build Rapsody software","vendor":"Schneider Electric","versions":[{"status":"affected","version":"v2.7.12 FR and prior"}]}],"source":"cybersecurity@se.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"CWE-121: Stack-based Buffer Overflow vulnerability exists that could cause local attackers being able to\nexploit these issues to potentially execute arbitrary code while the end user opens a malicious project file (SSD\nfile) provided by the attacker."},{"lang":"es","value":"CWE-121: Existe una vulnerabilidad de desbordamiento de búfer basada en pila que podría provocar que atacantes locales puedan explotar estos problemas para potencialmente ejecutar código arbitrario mientras el usuario final abre un archivo de proyecto malicioso (archivo SSD) proporcionado por el atacante."}],"id":"CVE-2025-3916","lastModified":"2026-06-17T09:20:55.440","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"LOCAL","availabilityRequirement":"NOT_DEFINED","baseScore":4.6,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"ACTIVE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"LOW","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"cybersecurity@se.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-3916","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2025-05-13T13:12:20.991476Z","version":"2.0.3"}}]},"published":"2025-05-13T09:15:21.027","references":[{"source":"cybersecurity@se.com","url":"https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2025-133-03&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2025-133-03.pdf"}],"sourceIdentifier":"cybersecurity@se.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-121"}],"source":"cybersecurity@se.com","type":"Secondary"}]}
|