This site currently shows sample data for demonstration.

Vulnerabilities

CVE-2025-9997 | BDVDB-2026-292891 Detail

Schneider ElectricSaitel DR RTU

Description#

CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause command injection in BLMon that is executed in the operating system console when in a SSH session.

Impact#

Per CVSS v4.0: confidentiality impact high, integrity impact low, availability impact low. Attack vector: local.

Weaknesses#

  • CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.
  2. Version 2Most recent update recorded in the CVE List.