CVE-2025-9996CWE-78command-injection

CVE-2025-9996

published September 10, 2025

CVSS
5.8
EPSS
1%
Percentile
43.6
In the wild
Unconfirmed
What it is

CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause the execution of any shell command when executing a netstat command using BLMon Console in an SSH session.

The record
Technical detail
CVSS
5.8 · NONE
CVSS v4.0
Not supplied
EPSS
0.00524 · 43.6th percentile
Weakness
CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Published
2025-09-10T01:15Z
References (1)
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2025-252-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2025-252-02.pdf · [email protected]
EPSS history
Timeline
  • 09 SEP 21:11Z
    CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause the execution of any…
    cvelistv5