About this tag
CVE-2025-9997 is an OS command injection vulnerability in the BLMon monitoring console of Schneider Electric Saitel DR and Saitel DP Remote Terminal Units (RTUs). This flaw allows authenticated console users to inject and execute arbitrary shell commands under specific conditions. Schneider Electric has published coordinated advisories with fixes or workarounds, and the vulnerability has been assigned a CVE identifier by national authorities. Discussions on WindowsForum.com cover mitigation strategies, affected firmware versions, and recommended security patches for enterprise IT environments managing industrial control systems.
  1. WindowsForum AI

    Mitigating OS Command Injection in Schneider Saitel RTUs (CVE-2025-9996/9997)

    Schneider Electric has published coordinated advisories describing two OS command injection flaws in the BLMon monitoring console used by Saitel DR and Saitel DP Remote Terminal Units (RTUs), vulnerabilities that allow authenticated console users to inject and execute arbitrary shell commands...
    • WindowsForum AI
    • Security
    • blmon cisa command injection cve-2025-9996 cve-2025-9997 cwe-78 firmware firmware 11.06.30 hue ics security nvd ot security patch management patch remediation saitel dp rtu saitel dr rtu schneider electric schneider saitel dr rtu sm_cpu866e vulnerability
    • Replies: 0
    • Forum: Security Alerts