PT-2021-2200 · Schneider Electric · Ecostruxure Power Build - Rapsody

Rgod · Published 2021-01-12 · Updated 2022-01-31 · CVE-2021-22698

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: EcoStruxure Power Build - Rapsody versions V2.1.13 and prior

Description: The issue is related to an unrestricted upload of files with dangerous types, which could lead to a stack-based buffer overflow and result in remote code execution when a malicious SSD file is uploaded and improperly parsed.

Recommendations: For EcoStruxure Power Build - Rapsody versions V2.1.13 and prior, consider restricting the upload of SSD files to prevent remote code execution until a patch is available. As a temporary workaround, avoid using the SSD file parsing functionality until the issue is resolved.

Fix

Unrestricted File Upload

Stack Overflow

Weakness Enumeration

CWE-434

CWE-121

Related Identifiers

BDU:2021-01109

CVE-2021-22698

ZDI-21-187

Affected Products

Ecostruxure Power Build - Rapsody

References · 12

• https://nvd.nist.gov/vuln/detail/CVE-2021-22698 · Security Note
• https://bdu.fstec.ru/vul/2021-01109 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-21-187 · Security Note
• https://se.com/ww/en/download/document/SEVD-2021-012-02 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-22698 · Vendor Advisory
• https://us-cert.cisa.gov/ics/advisories/icsa-21-012-01 · Note
• https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-012-02 · Note
• https://t.me/cvenotify/9247 · Telegram Post
• https://t.me/cvenotify/11478 · Telegram Post
• https://download.schneider-electric.com/files?p_enDocType=Technical+leaflet&p_File_Name=SEVD-2021-012-02_EcoStruxure_Power_Build_Rapsody_Security_Notification.pdf&p_Doc_Ref=SEVD-2021-012-02 · Note
• https://t.me/cibsecurity/22650 · Telegram Post
• https://download.schneider-electric.com/files?p_enDocType=Technical+leaflet&p_File_Name=SEVD-2021-012-02_EcoStruxure_Power_Build_Rapsody_Security_Notification.pdf&p_Doc_Ref=SEVD-2021-012-02 · Note