CWE-77: Command injection
The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.
Also known as Improper Neutralization of Special Elements used in a Command.
A kind of CWE-74 Injection.
From the CWE List. © The MITRE Corporation.
Newest
- 0x4m4 hexstrike ai0x4m4 HexStrike AI Execute Endpoint hexstrike_server.py os command injection6.9 Medium
- gh05tcrew pentestagentGH05TCREW PentestAgent LocalRuntime runtime.py LocalRuntime.execute_command os command injection6.9 Medium
- gh05tcrew pentestagentGH05TCREW PentestAgent MCP HTTP Server main.py run_task os command injection6.9 Medium
- webgjc web robotwebgjc web_robot web.py controller_recover os command injection5.3 Medium
- dell thinos, thinos 10 +1 moreDell ThinOS 10, versions prior to 2605_10.2616, contain an Improper Neutralization of Special...9.6 Critical
- dell secure connect gateway 5.0 - appliance, secure connect gateway 5.0 - application, secure connect gateway +2 moreDell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior...5.5 Medium
- dell secure connect gateway 5.0 - appliance, secure connect gateway 5.0 - application, secure connect gateway +2 moreDell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior...5.5 Medium
- dell secure connect gateway 5.0 - appliance, secure connect gateway 5.0 - application, secure connect gateway +2 moreDell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior...5.5 Medium
- dell secure connect gateway 5.0 - appliance, secure connect gateway 5.0 - application, secure connect gateway +2 moreDell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior...5.3 Medium
- dell secure connect gateway 5.0 - appliance, secure connect gateway 5.0 - application, secure connect gateway +2 moreDell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior...5.3 Medium
- microsoft azure cli, vm repair +1 moreMicrosoft Azure CLI Remote Code Execution Vulnerability8.0 High
- microsoft visual studio codeGitHub Copilot and Visual Studio Code Information Disclosure Vulnerability5.3 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +20 more +22 moreWindows Program Compatibility Assistant Service Elevation of Privilege Vulnerability7.8 High
- fortinet fortisandboxA improper neutralization of special elements used in a command ('command injection')...6.7 Medium
- librenmsLibreNMS before 26.8.0 Argument Injection via graph_title8.7 High
- linksys re7000Linksys RE7000 PingTest json.cgi platform_event_pingTest os command injection9.4 Critical
- d-link dir-895lD-Link DIR-895L udhcpcd serverpacket.c sendACK command injection6.9 Medium
- advantech wise-6610-cb, wise-6610-eb, wise-6610-el-cb +10 more +12 moreAdvantech WISE-6610-NB Node-RED nodered_lib_apply command injection9.4 Critical
- advantech wise-6610-cb, wise-6610-eb, wise-6610-el-cb +10 more +12 moreAdvantech WISE-6610-NB Basic Station Certificate-Deletion basicstation_apply command injection9.4 Critical
- tenda hg10Tenda HG10 Boa formgponConf os command injection9.4 Critical
- tenda cp3Tenda CP3 Kylin AutoAddWifi.cpp ThreadProc os command injection10.0 Critical
- tenda cp3Tenda CP3 Network Configuration Management system.c sub_2F77E8 os command injection9.4 Critical
- tenda cp3Tenda CP3 NetCheckPing.cpp os command injection9.4 Critical
- tenda cp3Tenda CP3 Kylin system.c SystemAsh os command injection9.4 Critical
- No product listedAn issue in the ugw-restart method of /cgi-bin/wwwugw.cgi in MBS-Solutions X-Serie Gateway...8.8 High
- d-link dns-320 sharecenterD-Link DNS-320 ShareCenter File Sharing file_sharing.cgi os command injection9.4 Critical
- d-link dns-340lD-Link DNS-340L CGI dropbox.cgi os command injection9.4 Critical
- d-link dns-340lD-Link DNS-340L Add-On Center addon_center.cgi os command injection9.4 Critical
- dell smartfabric os10Dell SmartFabric OS10 Software, versions prior to 10.5.6.14, contains an Improper Neutralization...5.0 Medium
- zhongbangkeji crmebZhongBangKeJi CRMEB Custom Scheduled Task Feature save eval os command injection5.1 Medium
- nuclioNuclio: Kaniko build tempDir command injection7.1 High
- hewlett packard enterprise (hpe) aos-cx, hpe arubaos-cx +1 moreAuthenticated Command Injection Vulnerabilities in the API Endpoint of AOS-CX7.2 High
- hewlett packard enterprise (hpe) aos-cx, hpe arubaos-cx +1 moreUnauthenticated Remote Command Execution in Management Component7.1 High
- hewlett packard enterprise (hpe) aos-cx, hpe arubaos-cx +1 moreAuthenticated Remote Command Injection in AOS-CX Web-based Management Interface8.8 High
- arubanetworks fabric composerAuthenticated Command Injection Vulnerabilities in HPE Networking Fabric Composer Web-Based Management Interface7.2 High
- arubanetworks fabric composerUnauthenticated Command Injection Vulnerability in HPE Networking Fabric Composer Web-Based Management Interface7.5 High
- arubanetworks fabric composerUnauthenticated Remote Code Execution in HPE Networking Fabric Composer API8.1 High
- arubanetworks fabric composerUnauthenticated Remote Code Execution during HPE Networking Fabric Composer Installation Process8.3 High
- arubanetworks fabric composerAuthenticated Command Injection Leading to Administrative Access in HPE Networking Fabric Composer API8.8 High
- fs-code fs poster - wordpress social media auto poster & scheduler [facebook, instagram, twitter, pinterest]FS Poster <= 8.0.1 - Authenticated (Subscriber+) Remote Code Execution via FFmpeg Path Setting8.8 High
- dell powerstore 1000t, powerstore 1200t, powerstore 3000t +10 more +12 moreDell PowerStore contains a Command Injection vulnerability. An authenticated user with limited...8.8 High
- icp das ua-2200, ua-5200 +1 moreICP DAS UA-2200/UA-5200 CGI ArmAngstromInstructionSet command injection5.3 Medium
- cobham satcom vsat7090 maritime satellite routerCobham SATCOM VSAT7090 Maritime Satellite Router JSON Parsing mail-report.sh c_set_reports_decode command injection9.4 Critical
- redport optimizer wxa-203, optimizer wxa-213, optimizer wxa-223 +2 moreRedPort Optimizer wXa-223 System Clock datetime.php exec command injection9.4 Critical
- qvidium opera11QVidium Opera11 CGI Script net_tr.cgi command injection10.0 Critical
- edimax br-6214kEdimax BR-6214K asp_setPing Endpoint ping.asp system os command injection5.1 Medium
- edimax br-6214kEdimax BR-6214K asp_WlanMP Endpoint wlanMP.asp system os command injection5.1 Medium
- d-link dns-340l, dns-345 +1 moreD-Link DNS-340L/DNS-345 iscsi_mgr.cgi os command injection9.4 Critical
- d-link dns-320l, dns-327l, dns-340l +1 more +3 moreD-Link DNS-320L/DNS-327L/DNS-340L/DNS-345 CGI usb_device.cgi os command injection9.4 Critical
- d-link dns-327l, dns-340l +1 moreD-Link DNS-327L/DNS-340L ve_mgr.cgi os command injection9.4 Critical
- Show moreLoading…