5.8
Medium
CVE-2025-9997 CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability…
Description
CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause command injection in BLMon that is executed in the operating system console when in a SSH session.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Saitel DR RTU 11.06 | earliest → 11.06.29 | No fix stated |
| Saitel DP RTU 11.06 | earliest → 11.06.33 | No fix stated |