CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause command injection in BLMon that is executed in the operating system console when in a SSH session.

CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause command injection in BLMon that is executed in the operating system console when in a SSH session.

A OS command injection vulnerability exists that could cause the execution of any shell command when executing a netstat command using BLMon Console in anSSH session. CWE-78: Improper Neutralization of Special Elements used in an OS Command vulnerability exists that couldcause command injection in BLMon that is executed in the operating system console when in a SSH session.

Schneider Electric is aware of vulnerabilities in its Saitel DR & Saitel DP RTU (Remote Terminal Unit) product(s).

The Saitel DR RTU https://www.se.com/ww/en/product-country-selector/?pageType=product-range&sourceId=62685#overview is a field device, offering a solid and powerful platform for data acquisition, communication, automation and IED integration for distribution and transmission networks, generation sector and railway.

The Saitel DP RTU https://www.se.com/ww/en/product-country-selector/?pageType=product-range&sourceId=61747 is a modular platform for medium voltage and low voltage public distribution and transmission network management.

Failure to apply the remediations provided below may risk command injection attack, which could result in arbitrary code execution.