VULNERABILITY INTELLIGENCE
CVE-2025-9997
CVSS score5.8 MEDIUM
EPSS probability0.49%
CISA KEVNot currently listed
Published2025-09-09
Last modified2026-10-18
CVSS vectorCVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N
Description
CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause command injection in BLMon that is executed in the operating system console when in a SSH session.
Weakness classification
- CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')