CVE-2025-9996: Schneider Electric Saitel Dp Rtu

Medium severity, CVSS 5.8. EPSS: 0.5% chance of exploitation in the next 30 days.

CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause the execution of any shell command when executing a netstat command using BLMon Console in an SSH session.

Affected products

• Schneider Electric Saitel Dp Rtu: up to and including 11.06.33
• Schneider Electric Saitel Dr Rtu: up to and including 11.06.29

Published 2025-09-09. Last modified 2026-06-17.