5.8
Medium
CVE-2025-9996 CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability…
Description
CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause the execution of any shell command when executing a netstat command using BLMon Console in an SSH session.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Saitel DR RTU 11.06 | earliest → 11.06.29 | No fix stated |
| Saitel DP RTU 11.06 | earliest → 11.06.33 | No fix stated |