Description
CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause the execution of any shell command when executing a netstat command using BLMon Console in an SSH session.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schneider Electric | Saitel DR RTU | all versions – ≤ 11.06.29 | — |
| Schneider Electric | Saitel DP RTU | all versions – ≤ 11.06.33 | — |
Advisories 3
- ICSA-25-261-03 Schneider Electric Saitel DR & Saitel DP Remote Terminal Unit CISA ICS & IT advisories · Sep 18, 2025
- NCSC-2025-0276 Kwetsbaarheden verholpen in Schneider Electric Saitel NCSC-NL (Netherlands) · Sep 9, 2025
- SEVD-2025-252-02 Saitel DR & Saitel DP Remote Terminal Unit Schneider Electric CPCERT · Sep 9, 2025