CWE-77: Command injection
The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.
Also known as Improper Neutralization of Special Elements used in a Command.
A kind of CWE-74 Injection.
From the CWE List. © The MITRE Corporation.
Newest
- dokployDokploy: Remote Code Execution via destinationPath in Container File Upload9.9 Critical
- trendnet tew-432brp, tew-432brp firmware +1 moreTRENDnet TEW-432BRP formWPS command injection5.3 Medium
- trendnet tew-432brp, tew-432brp firmware +1 moreTRENDnet TEW-432BRP formSetRoute command injection5.3 Medium
- acer predator connect w6x, predator connect w6x firmware +1 morePredator Connect W6x: RCE via MQTT10.0 Critical
- acer predator connect w6x, predator connect w6x firmware +1 morePredator Connect W6x: Web Interface Command Injection8.6 High
- mintplexlabs anythingllm, mintplex-labs anything-llm +1 moreAnythingLLM: RCE via ripgrep --pre argument injection in filesystem-search-files agent skill7.5 High
- inhandnetworks ir302 firmware, ir305 firmware, ir315 firmware +1 more +3 moreA command injection vulnerability exists in the IPSec VPN feature of InHand Networks IR302...9.8 Critical
- inhandnetworks ir302 firmware, ir305 firmware, ir315 firmware +1 more +3 moreA command injection vulnerability exists in the WireGuard VPN feature of InHand Networks IR302...9.8 Critical
- inhandnetworks ir302 firmware, ir305 firmware, ir315 firmware +1 more +3 moreA command injection vulnerability exists in the ZeroTier VPN feature of InHand Networks IR302...9.8 Critical
- inhandnetworks ir302 firmware, ir305 firmware, ir315 firmware +1 more +3 moreA command injection vulnerability exists in the Admin Access feature of InHand Networks IR302...9.8 Critical
- tp-link systems inc. archer be450 v1, tp-link archer be450 firmware, archer be7200 firmware +1 more +3 moreArbitrary Command Injection via Browser Developer Console in TP-Link Archer BE450 and BE72008.5 High
- No product listedCommand injection in Raynet rvia version 12.6.4392.49-amd64.deb allows adversaries to execute...7.8 High
- No product listedNetis AC1200 Router NC21 V4.0.1.4296 is vulnerable to unauthenticated command injection via the ...7.3 High
- No product listedCommand injection in Raynet rvia 12.6.4392.49-amd64.deb allows adversaries to execute commands...7.8 High
- haojing8312 workclawhaojing8312 WorkClaw Blacklist bash.rs is_dangerous os command injection5.3 Medium
- mossdef-org luci-app-https-dns-proxyluci-app-https-dns-proxy Authenticated Command Injection via setInitAction8.7 High
- totolink n300rhTotolink N300RH Web Management cstecgi.cgi setPasswordCfg os command injection9.3 Critical
- totolink ca750-poeTotolink CA750-PoE Setting cstecgi.cgi setWiFiWpsConfig os command injection5.3 Medium
- totolink ca750-poeTotolink CA750-PoE Setting cstecgi.cgi recvUpgradeNewFw os command injection5.3 Medium
- totolink ca750-poeTotolink CA750-PoE Setting cstecgi.cgi setUploadUserData os command injection5.3 Medium
- totolink ca750-poeTotolink CA750-PoE Setting cstecgi.cgi setUpgradeUboot os command injection5.3 Medium
- pavel-odintsov fastnetmonFastNetMon Community Edition through 1.2.9 contains a configuration injection vulnerability in...8.1 High
- totolink ca750-poeTotolink CA750-PoE Setting cstecgi.cgi setUnloadUserData os command injection5.3 Medium
- totolink ca750-poeTotolink CA750-PoE Setting cstecgi.cgi setNetworkDiag os command injection5.3 Medium
- totolink ca750-poeTotolink CA750-PoE Setting cstecgi.cgi NTPSyncWithHost os command injection5.3 Medium
- totolink ca750-poeTotolink CA750-PoE Setting cstecgi.cgi setPasswordCfg os command injection5.3 Medium
- totolink ca750-poeTotolink CA750-PoE Setting cstecgi.cgi setWebWlanIdx os command injection5.3 Medium
- totolink a8000ruTotolink A8000RU Web Management cstecgi.cgi setParentalRules os command injection9.3 Critical
- totolink a8000ruTotolink A8000RU Web Management cstecgi.cgi setAccessDeviceCfg os command injection9.3 Critical
- totolink a8000ruTotolink A8000RU Web Management cstecgi.cgi setPasswordCfg os command injection9.3 Critical
- totolink a8000ruTotolink A8000RU Web Management cstecgi.cgi setIpQosRules os command injection9.3 Critical
- totolink a8000ruTotolink A8000RU Web Management cstecgi.cgi setWanCfg os command injection9.3 Critical
- totolink a8000ruTotolink A8000RU Web Management cstecgi.cgi UploadFirmwareFile os command injection9.3 Critical
- totolink a8000ruTotolink A8000RU Web Management cstecgi.cgi setOpenVpnCfg os command injection9.3 Critical
- totolink a8000ruTotolink A8000RU Web Management cstecgi.cgi UploadOpenVpnCert os command injection9.3 Critical
- totolink a8000ruTotolink A8000RU Web Management cstecgi.cgi setOpenVpnCertGenerationCfg os command injection9.3 Critical
- founddream miniclawdFoundDream miniclawd SkillsLoader skills-loader.ts which command injection6.9 Medium
- founddream miniclawdFoundDream miniclawd exec.ts ExecTool.execute os command injection6.9 Medium
- edimax br-6478acEdimax BR-6478AC POST Request formiNICbasic command injection5.3 Medium
- edimax br-6478acEdimax BR-6478AC POST Request formAccept command injection5.3 Medium
- edimax br-6675ndEdimax BR-6675nD stainfo command injection5.3 Medium
- dtstack taierDTStack Taier REST API Runtime.exec os command injection5.3 Medium
- totolink a8000ruTotolink A8000RU Web Management cstecgi.cgi setL2tpServerCfg os command injection9.3 Critical
- totolink a8000ruTotolink A8000RU Web Management cstecgi.cgi setQosCfg os command injection9.3 Critical
- totolink a8000ruTotolink A8000RU Web Management cstecgi.cgi setWiFiWpsCfg os command injection9.3 Critical
- totolink a8000ruTotolink A8000RU Web Management cstecgi.cgi setMacFilterRules os command injection9.3 Critical
- totolink a8000ruTotolink A8000RU Web Management cstecgi.cgi setWiFiAdvancedCfg os command injection9.3 Critical
- edimax ew-7438rpnEdimax EW-7438RPn Content-Type formWlanMP os command injection5.3 Medium
- edimax br-6675ndEdimax BR-6675nD POST Request mp command injection5.1 Medium
- totolink a8000ruTotolink A8000RU Web Management cstecgi.cgi setStaticDhcpRules os command injection9.3 Critical
- Show moreLoading…