CVE-2025-9997CWE-78command-injection

CVE-2025-9997

published September 10, 2025

CVSS
5.8
EPSS
0%
Percentile
41.2
In the wild
Unconfirmed
What it is

CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause command injection in BLMon that is executed in the operating system console when in a SSH session.

The record
Technical detail
CVSS
5.8 · NONE
CVSS v4.0
Not supplied
EPSS
0.00490 · 41.2th percentile
Weakness
CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Published
2025-09-10T02:15Z
References (1)
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2025-252-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2025-252-02.pdf · [email protected]
EPSS history
Timeline
  • 09 SEP 21:12Z
    CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause command injection in…
    cvelistv5