Description
CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause command injection in BLMon that is executed in the operating system console when in a SSH session.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schneider Electric | Saitel DR RTU | all versions – ≤ 11.06.29 | — |
| Schneider Electric | Saitel DP RTU | all versions – ≤ 11.06.33 | — |
Advisories 3
- ICSA-25-261-03 Schneider Electric Saitel DR & Saitel DP Remote Terminal Unit CISA ICS & IT advisories · Sep 18, 2025
- NCSC-2025-0276 Kwetsbaarheden verholpen in Schneider Electric Saitel NCSC-NL (Netherlands) · Sep 9, 2025
- SEVD-2025-252-02 Saitel DR & Saitel DP Remote Terminal Unit Schneider Electric CPCERT · Sep 9, 2025