{"id":"CVE-2025-9997","state":"PUBLISHED","title":"CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause command injection in BLMon that is executed","description":"CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause command injection in BLMon that is executed in the operating system console when in a SSH session.","publishedAt":"2025-09-09T21:12:35.969Z","updatedAt":"2025-09-10T19:34:21.734Z","severity":{"score":5.8,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N","source":"schneider"},"assigner":"schneider","products":["Schneider Electric Saitel DR RTU","Schneider Electric Saitel DP RTU"],"affected":[{"vendor":"Schneider Electric","product":"Saitel DR RTU","defaultStatus":"unaffected","versions":[{"version":"all versions","status":"affected","lessThanOrEqual":"11.06.29","versionType":"version"}]},{"vendor":"Schneider Electric","product":"Saitel DP RTU","defaultStatus":"unaffected","versions":[{"version":"all versions","status":"affected","lessThanOrEqual":"11.06.33","versionType":"version"}]}],"references":["https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2025-252-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2025-252-02.pdf"],"weaknesses":["CWE-78"],"ingestedAt":"2026-10-29T20:10:13.529Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/9xxx/CVE-2025-9997.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2025-9997","state":"PUBLISHED","datePublished":"2025-09-09T21:12:35.969Z","dateUpdated":"2025-09-10T19:34:21.734Z","assignerShortName":"schneider","assignerOrgId":"076d1eb6-cfab-4401-b34d-6dfc2a413bdb","dateReserved":"2025-09-04T16:16:04.091Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause command injection in BLMon that is executed in the operating system console when in a SSH session."}],"affected":[{"vendor":"Schneider Electric","product":"Saitel DR RTU","defaultStatus":"unaffected","versions":[{"version":"all versions","status":"affected","lessThanOrEqual":"11.06.29","versionType":"version"}]},{"vendor":"Schneider Electric","product":"Saitel DP RTU","defaultStatus":"unaffected","versions":[{"version":"all versions","status":"affected","lessThanOrEqual":"11.06.33","versionType":"version"}]}],"references":[{"url":"https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2025-252-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2025-252-02.pdf"}],"metrics":[{"cvssV4_0":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"LOCAL","baseScore":5.8,"baseSeverity":"MEDIUM","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N","version":"4.0","vulnAvailabilityImpact":"LOW","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-78","description":"CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"schneider","orgId":"076d1eb6-cfab-4401-b34d-6dfc2a413bdb","dateUpdated":"2025-09-09T21:12:35.969Z"},"datePublic":"2025-09-09T04:01:00.000Z","source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-09-10T19:34:13.130524Z","id":"CVE-2025-9997","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-09-10T19:34:21.734Z"}}]}}}