CVE-2025-9997 — Schneider Electric / Saitel DR RTU

CVE-2025-9997

Schneider Electric / Saitel DR RTU PUBLISHED

Description (CNA)

CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause command injection in BLMon that is executed in the operating system console when in a SSH session.

Affected (CNA)

Vendor / product	Versions
Schneider Electric / Saitel DR RTU	affected all versions through 11.06.29
Schneider Electric / Saitel DP RTU	affected all versions through 11.06.33

CWE

CWE-78

References

https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2025-252-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2025-252-02.pdf

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.