CVE-2025-9996 MEDIUM

CVE-2025-9996

Vendor Schneider Electric
Product Saitel DR RTU
Weakness CWE-78
Published September 9, 2025
Last update September 10, 2025
View on NVD All CVEs

CVSS base score

5.8/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N

What the vulnerability does

01Description

CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause the execution of any shell command when executing a netstat command using BLMon Console in an SSH session.

Key dates

02Disclosure timeline

September 9, 2025 CVE published
September 10, 2025 Record updated