Most recent entries from all

bdu:2025-12972

EUVD-2026-252468

fkie_cve-2025-9996

CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause the execution of any shell command when executing a netstat command using BLMon Console in an SSH session.

GHSA-p756-795x-5hq9

ICSA-25-261-03 — Schneider Electric Saitel DR & Saitel DP Remote Terminal Unit

A OS command injection vulnerability exists that could cause the execution of any shell command when executing a netstat command using BLMon Console in anSSH session. CWE-78: Improper Neutralization of Special Elements used in an OS Command vulnerability exists that couldcause command injection in BLMon that is executed in the operating system console when in a SSH session.

SEVD-2025-252-02 — Saitel DR & Saitel DP Remote Terminal Unit

Schneider Electric is aware of vulnerabilities in its Saitel DR & Saitel DP RTU (Remote Terminal Unit) product(s).

The Saitel DR RTU https://www.se.com/ww/en/product-country-selector/?pageType=product-range&sourceId=62685#overview is a field device, offering a solid and powerful platform for data acquisition, communication, automation and IED integration for distribution and transmission networks, generation sector and railway.

The Saitel DP RTU https://www.se.com/ww/en/product-country-selector/?pageType=product-range&sourceId=61747 is a modular platform for medium voltage and low voltage public distribution and transmission network management.

Failure to apply the remediations provided below may risk command injection attack, which could result in arbitrary code execution.