CWE-77: Command injection
The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.
Also known as Improper Neutralization of Special Elements used in a Command.
A kind of CWE-74 Injection.
From the CWE List. © The MITRE Corporation.
Newest
- totolink a8000ruTotolink A8000RU CGI cstecgi.cgi setLoginPasswordCfg os command injection9.3 Critical
- totolink a8000ruTotolink A8000RU CGI cstecgi.cgi setAdvancedInfoShow os command injection9.3 Critical
- totolink a8000ruTotolink A8000RU CGI cstecgi.cgi setMiniuiHomeInfoShow os command injection9.3 Critical
- totolink a8000ruTotolink A8000RU CGI cstecgi.cgi setTelnetCfg os command injection9.3 Critical
- totolink a8000ruTotolink A8000RU CGI cstecgi.cgi CsteSystem os command injection9.3 Critical
- totolink a8000ruTotolink A8000RU CGI cstecgi.cgi setWiFiAclRules os command injection9.3 Critical
- totolink a8000ruTotolink A8000RU CGI cstecgi.cgi setNtpCfg os command injection9.3 Critical
- totolink a8000ruTotolink A8000RU CGI cstecgi.cgi setStorageCfg os command injection9.3 Critical
- totolink a8000ruTotolink A8000RU CGI cstecgi.cgi setDmzCfg os command injection9.3 Critical
- totolink a8000ruTotolink A8000RU CGI cstecgi.cgi setWiFiEasyCfg os command injection9.3 Critical
- totolink a8000ruTotolink A8000RU CGI cstecgi.cgi setIpv6LanCfg os command injection9.3 Critical
- totolink a8000ruTotolink A8000RU CGI cstecgi.cgi setIptvCfg os command injection9.3 Critical
- totolink a8000ruTotolink A8000RU CGI cstecgi.cgi setUPnPCfg os command injection9.3 Critical
- totolink a8000ruTotolink A8000RU CGI cstecgi.cgi setWizardCfg os command injection9.3 Critical
- tenda hg3, hg3 firmware +1 moreTenda HG3 formCountrystr os command injection8.7 High
- tenda f456, f456 firmware +1 moreTenda F456 httpd WriteFacMac FromWriteFacMac command injection5.3 Medium
- tenda hg3, hg3 firmware +1 moreTenda HG3 formgponConf os command injection8.7 High
- tenda ac18 firmwareA command injection vulnerability exists in Tenda AC18 V15.03.05.05_multi. The vulnerability is...9.8 Critical
- No product listedA remote code execution (RCE) vulnerability in the /devserver/start endpoint of leonvanzyl...9.8 Critical
- d-link dir-822, dlink dir-822 firmware +1 moreD-Link DIR-822 udhcpd DHCP Service dhcpd.c system command injection6.9 Medium
- choieastsea simple-openstack-mcpchoieastsea simple-openstack-mcp server.py exec_openstack os command injection6.9 Medium
- agentdeskai browser-tools-mcpAgentDeskAI browser-tools-mcp browser-connector.ts os command injection6.9 Medium
- intina47 context-syncIntina47 context-sync Git Integration git-integration.ts os command injection6.9 Medium
- toowiredd chatgpt-mcp-serverToowiredd chatgpt-mcp-server MCP/HTTP docker.service.ts os command injection6.9 Medium
- 666ghj mirofish666ghj MiroFish Inter-Process Communication simulation_ipc.py SimulationIPCClient.send_command command injection6.9 Medium
- tufantunc ssh-mcptufantunc ssh-mcp index.ts shell.write command injection8.5 High
- totolink a8000ruTotolink A8000RU CGI cstecgi.cgi setVpnPassCfg os command injection9.3 Critical
- berriai litellm, red hat exploit intelligence, ansible automation platform 2 +5 more +7 moreLiteLLM: Authenticated command execution via MCP stdio test endpoints8.7 High
- linksys mr9600, mr9600 firmware +1 moreLinksys MR9600 JNAP Action run_central2.sh BTRequestGetSmartConnectStatus os command injection8.6 High
- tenda f453, f453 firmware +1 moreTenda F453 Telnet Service telnet TendaTelnet command injection5.3 Medium
- sipeed picoclawPicoClaw Web Launcher Management Plane restart command injection6.9 Medium
- divyanshu-hash gitpilot-mcpDivyanshu-hash GitPilot-MCP main.py repo_path command injection6.9 Medium
- electermelecterm has Command Injection Vulnerability via runLinux function9.8 Critical
- google gemini-cli, run-gemini-cli, google cloud gemini cli +1 more +3 moreUnauthenticated Remote Code Execution in Gemini CLI CI/CD Workflows10.0 Critical
- anthropic claude code, anthropics claude-code +1 moreClaude Code arbitrary code execution via git worktree commondir trust dialog bypass7.7 High
- totolink a3300r firmwareAn issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to...6.5 Medium
- totolink a3300r firmwareAn issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to...6.5 Medium
- totolink a3300r firmwareAn issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to...9.8 Critical
- totolink a3300r firmwareAn issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to...6.5 Medium
- totolink a3300r firmwareAn issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to...6.5 Medium
- totolink a3300r firmwareAn issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to...6.5 Medium
- totolink a3300r firmwareAn issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to...6.5 Medium
- totolink a3300r firmwareAn issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to...6.5 Medium
- totolink a3300r firmwareAn issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to...6.5 Medium
- totolink a3300r firmwareAn issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to...6.5 Medium
- totolink a3300r firmwareAn issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to...6.5 Medium
- totolink a3300r firmwareAn issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to...6.5 Medium
- totolink a3300r firmwareAn issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to...6.5 Medium
- totolink a3300r firmwareAn issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to...6.5 Medium
- totolink a3300r firmwareAn issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to...6.5 Medium
- Show moreLoading…