SEVD-2025-252-02 Saitel DR & Saitel DP Remote Terminal Unit Security Notification

Schneider Electric is aware of vulnerabilities in its Saitel DR & Saitel DP RTU (Remote Terminal Unit) product(s). The Saitel DR RTU is a field device, offering a solid and powerful platform for data acquisition, communication, automation and IED integration for distribution and transmission networks, generation sector and railway. The Saitel DP RTU is a modular platform for medium voltage and low voltage public distribution and transmission network management. Failure to apply the remediations provided below may risk command injection attack, which could result in arbitrary code execution. CVE-2025-9996, CVE-2025-9997 CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') SEVD-2025-252-02 Saitel DR & Saitel DP Remote Terminal Unit Security Notification