CWE-77: Command injection
The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.
Also known as Improper Neutralization of Special Elements used in a Command.
A kind of CWE-74 Injection.
From the CWE List. © The MITRE Corporation.
Newest
- d-link dwr-m920, dlink dwr-m920 firmware +1 moreD-Link DWR-M920 formLtefotaUpgradeQuectel sub_415328 command injection5.3 Medium
- d-link dwr-m920, dlink dwr-m920 firmware +1 moreD-Link DWR-M920 formLtefotaUpgradeFibocom sub_4155B4 command injection5.3 Medium
- trendnet tew-822dre, tew-822dre firmware +1 moreTRENDnet TEW-822DRE formWsc sub_43ACF4 command injection5.3 Medium
- trendnet tew-800mb, tew-800mb firmware +1 moreTRENDnet TEW-800MB NTPSyncWithHost.cgi sub_F934 command injection8.7 High
- trendnet tew-800mb, tew-800mb firmware +1 moreTRENDnet TEW-800MB Management wizardset do_setWizard_asp command injection8.7 High
- zspace z4pro+, z4pro\+ firmware +1 moreZSPACE Z4Pro+ HTTP POST Request close zfilev2_api_CloseSafe command injection5.3 Medium
- zspace z4pro+, z4pro\+ firmware +1 moreZSPACE Z4Pro+ HTTP POST Request open zfilev2_api_open command injection5.3 Medium
- zspace z4pro+, z4pro\+ firmware +1 moreZSPACE Z4Pro+ HTTP POST Request status zfilev2_api_SafeStatus command injection5.3 Medium
- yealink sip-t21\(p\)e2 firmwareAn issue in Yealink T21P_E2 Phone 52.84.0.15 allows a remote normal privileged attacker to...8.8 High
- symwld delight custom firmwareAn issue was discovered in the Delight Custom Firmware (CFW) for Nokia Symbian Belle devices on...5.1 Medium
- jd cloud be6500JD Cloud BE6500 jdcapi sub_4780 command injection5.3 Medium
- tenda wh450, wh450 firmware +1 moreTenda WH450 HTTP Request CheckTools command injection6.9 Medium
- netgear ex8000 firmwareNetgear EX8000 V1.0.0.126 was discovered to contain a command injection vulnerability via the...9.8 Critical
- netgear ex8000 firmwareNetgear EX8000 V1.0.0.126 is vulnerable to Command Injection via the iface parameter in the...6.5 Medium
- linksys e5600 firmwarelinksys E5600 V1.1.0.26 is vulnerable to command injection in the function ddnsStatus.9.8 Critical
- linksys e5600 firmwareLinksys E5600 V1.1.0.26 is vulnerable to command injection in the runtime.macClone function via...9.8 Critical
- connectify speedifyA command injection vulnerability in the me.connectify.SMJobBlessHelper XPC service of Speedify...8.4 High
- pluxmlAuthenticated Remote Code Execution (RCE) in PluXml CMS 5.8.22 allows an attacker with...6.5 Medium
- d-link dir-605, dlink dir-605 firmware +1 moreD-Link DIR-605 Firmware Update Service command injection8.6 High
- zedZed IDE MCP Context Server Configuration Arbitrary Code Execution7.8 High
- zedZed IDE LSP Binary Configuration Arbitrary Code Execution7.8 High
- conda miniconda3Miniconda3 macOS installers before 23.11.0-1 contain a local privilege escalation vulnerability...7.8 High
- anaconda anaconda3Anaconda3 macOS installers before 2024.06-1 contain a local privilege escalation vulnerability...7.8 High
- shiguangwu sgwbox n3, sgwbox n3 firmware +1 moreShiguangwu sgwbox N3 DOCKER Feature http_eshell_server command injection9.3 Critical
- shiguangwu sgwbox n3, sgwbox n3 firmware +1 moreShiguangwu sgwbox N3 NETREBOOT http_eshell_server command injection9.3 Critical
- shiguangwu sgwbox n3, sgwbox n3 firmware +1 moreShiguangwu sgwbox N3 SHARESERVER Feature command injection9.3 Critical
- totolink a3300r firmwareTOTOLINK A3300R V17.0.0cu.596_B20250515 is vulnerable to command injection in the function...6.5 Medium
- totolink n200re firmwareTOTOLINK N200RE V9.3.5u.6437_B20230519 is vulnerable to command Injection in setOpModeCfg via...6.5 Medium
- d-link dir-860lb1, dir-868lb1, dlink dir-860l b1 firmware +1 more +3 moreD-Link DIR-860LB1/DIR-868LB1 DHCP command injection8.7 High
- dedebizDedeBIZ catalog_add.php command injection5.1 Medium
- totolink x5000r, x5000r firmware +1 moreTOTOLINK X5000R cstecgi.cgi snprintf os command injection5.3 Medium
- shaneisrael fireshareFireshare Public Uploads feature is vulnerable to OS Command Injection (RCE)9.8 Critical
- pgadmin 4, pgadmin.org pgadmin 4 +1 moreRemote Code Execution vulnerability when restoring PLAIN-format SQL dumps in server mode (pgAdmin 4)9.1 Critical
- linuxfoundation gardenctl, gardener gardenctl-v2 +1 moregardenctl is vulnerable to Command Injection when used with non‑POSIX shells8.0 High
- teamviewer dex, digital employee experience +1 moreCommand Injection in 1E-ConfigMgrConsoleExtensions Instructions6.8 Medium
- teamviewer dex, digital employee experience +1 moreCommand Injection in 1E-Nomad-PauseNomadJobQueue Instruction6.8 Medium
- teamviewer dex, digital employee experience +1 moreCommand Injection in 1E-PatchInsights-Deploy Instruction6.8 Medium
- teamviewer dex, digital employee experience +1 moreCommand Injection in 1E-Nomad-GetCmContentLocations Instruction7.2 High
- teamviewer dex, digital employee experience +1 moreCommand Injection in 1E-Explorer-TachyonCore-CheckSimpleIoC Instruction7.2 High
- teamviewer dex, digital employee experience +1 moreCommand Injection in 1E-Explorer-TachyonCore-DevicesListeningOnAPort Instruction7.2 High
- efm iptime a3004tEFM ipTIME A3004T Administrator Password timepro.cgi show_debug_screen command injection2.3 Low
- aqara camera hub g3 firmwareCommand injection vulnerabilities in Aqara Camera Hub G3 4.1.9_0027 allow attackers to execute...6.6 Medium
- aqara camera hub g3 firmware, hub m2 firmware, hub m3 firmware +2 moreCommand injection vulnerability in Aqara Hub devices including Camera Hub G3 4.1.9_0027, Hub M2 4...7.3 High
- aliasrobotics cai, cybersecurity ai +1 moreCybersecurity AI (CAI) vulnerable to Command Injection in run_ssh_command_with_credentials Agent tool9.7 Critical
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +30 more +32 morePowerShell Remote Code Execution Vulnerability7.8 High
- microsoft github copilot, github copilot plugin for jetbrains ides +1 moreGitHub Copilot for Jetbrains Remote Code Execution Vulnerability8.4 High
- siemens simatic cn 4100, simatic cn 4100 firmware +1 moreA vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affected...8.7 High
- siemens ruggedcom rox mx5000, ruggedcom rox mx5000re, ruggedcom rox rx1400 +9 more +11 moreA vulnerability has been identified in RUGGEDCOM ROX II family (All versions < V2.17.0). Due to...8.6 High
- siemens ruggedcom rox mx5000, ruggedcom rox mx5000re, ruggedcom rox rx1400 +9 more +11 moreA vulnerability has been identified in RUGGEDCOM ROX II family (All versions < V2.17.0). During...7.7 High
- ilevia eve x1 serverIlevia EVE X1 Server leaf_search.php command injection6.3 Medium
- Show moreLoading…