CVE-2025-9996 - CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause the execution of any shell command when executing a netstat command using BLMon Console in an SSH session

Back Back to CVE browser

MEDIUM

CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause the execution of any shell command when executing a netstat command using BLMon Console in an SSH session

Published Sep 9, 2025

5.8

MEDIUM

CVSS 4.0

EPSS 0.52%

Description

CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause the execution of any shell command when executing a netstat command using BLMon Console in an SSH session.

Affected products

Vendor Schneider Electric Product Saitel DP RTU Default
unaffected
- Version
  all versions
  Status
  affected
  Constraints
  <=11.06.33
Vendor Schneider Electric Product Saitel DR RTU Default
unaffected
- Version
  all versions
  Status
  affected
  Constraints
  <=11.06.29

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Schneider Electric

Saitel DP RTU

unaffected

Version	Status	Constraints
all versions	affected	<=11.06.33

Schneider Electric

Saitel DR RTU

unaffected

Version	Status	Constraints
all versions	affected	<=11.06.29

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-78

OS Command Injection

References (2)

Link	Providers	Tags
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2025-252-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2025-252-02.pdf
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-27485		Advisory