CVE-2021-22698

Name of the Vulnerable Software and Affected Versions: EcoStruxure Power Build - Rapsody versions V2.1.13 and prior

Description: The issue is related to an unrestricted upload of files with dangerous types, which could lead to a stack-based buffer overflow and result in remote code execution when a malicious SSD file is uploaded and improperly parsed.

Recommendations: For EcoStruxure Power Build - Rapsody versions V2.1.13 and prior, consider restricting the upload of SSD files to prevent remote code execution until a patch is available. As a temporary workaround, avoid using the SSD file parsing functionality until the issue is resolved.