VYPR

CWE-77

Improper Neutralization of Special Elements used in a Command ('Command Injection')

ClassDraftLikelihood: High

Description

The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.

Hierarchy (View 1000)

Parents

Related attack patterns (CAPEC)

CAPEC-136 · CAPEC-15 · CAPEC-183 · CAPEC-248 · CAPEC-40 · CAPEC-43 · CAPEC-75 · CAPEC-76

CVEs mapped to this weakness (3,816)

page 17 of 191
  • CVE-2025-61045CriOct 1, 2025
    Totolink
    X18
    risk 0.64cvss 9.8epss 0.02

    TOTOLINK X18 V9.1.0cu.2053_B20230309 was discovered to contain a command injection vulnerability via the mac parameter in the setEasyMeshAgentCfg function.

  • CVE-2025-61044CriOct 1, 2025
    Totolink
    X18
    risk 0.64cvss 9.8epss 0.01

    TOTOLINK X18 V9.1.0cu.2053_B20230309 was discovered to contain a command injection vulnerability via the agentName parameter in the setEasyMeshAgentCfg function.

  • CVE-2025-11148CriSep 30, 2025
    Puntorigen
    Check Branches
    risk 0.64cvss 9.8epss 0.01

    All versions of the package check-branches are vulnerable to Command Injection check-branches is a command-line tool that is interacted with locally, or via CI, to confirm no conflicts exist in git branches. However, the library follows these conventions which can be abused: 1.…

  • CVE-2025-52053CriSep 15, 2025
    Totolink
    X6000R
    risk 0.64cvss 9.8epss 0.04

    TOTOLINK X6000R V9.4.0cu.1360_B20241207 was found to contain a command injection vulnerability in the sub_417D74 function via the file_name parameter. This vulnerability allows unauthenticated attackers to execute arbitrary commands via a crafted request.

  • CVE-2025-57633CriSep 9, 2025
    FTP Flask Python
    FTP-Flask-python
    risk 0.64cvss 9.8epss 0.01

    A command injection vulnerability in FTP-Flask-python through 5173b68 allows unauthenticated remote attackers to execute arbitrary OS commands. The /ftp.html endpoint's "Upload File" action constructs a shell command from the ftp_file parameter and executes it using os.system()…

  • CVE-2025-50722CriAug 25, 2025
    sparkshop
    sparkshop
    risk 0.64cvss 9.8epss 0.01

    Insecure Permissions vulnerability in sparkshop v.1.1.7 allows a remote attacker to execute arbitrary code via the Common.php component

  • CVE-2025-57105CriAug 22, 2025
    Dlink
    DI-7400G+
    risk 0.64cvss 9.8epss 0.03

    The DI-7400G+ router has a command injection vulnerability, which allows attackers to execute arbitrary commands on the device. The sub_478D28 function in in mng_platform.asp, and sub_4A12DC function in wayos_ac_server.asp of the jhttpd program, with the parameter…

  • CVE-2025-55637CriAug 22, 2025
    Reolink
    Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime
    risk 0.64cvss 9.8epss 0.02

    Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime - firmware v3.0.0.4662_2503122283 was discovered to contain a command injection vulnerability via the setddns_pip_system() function.

  • CVE-2025-24285CriAug 21, 2025
    Unify
    UniFi Connect EV Station Lite
    risk 0.64cvss 9.8epss 0.01

    Multiple Improper Input Validation vulnerabilities in UniFi Connect EV Station Lite may allow a Command Injection by a malicious actor with network access to the UniFi Connect EV Station Lite. Affected Products: UniFi Connect EV Station Lite (Version 1.5.1 and earlier) …

  • CVE-2025-55591CriAug 18, 2025
    Totolink
    A3002r Firmware
    risk 0.64cvss 9.8epss 0.07

    TOTOLINK-A3002R v4.0.0-B20230531.1404 was discovered to contain a command injection vulnerability in the devicemac parameter in the formMapDel endpoint.

  • CVE-2025-27212CriAug 4, 2025
    Unify
    Access G2 Reader Pro
    risk 0.64cvss 9.8epss 0.01

    An Improper Input Validation in certain UniFi Access devices could allow a Command Injection by a malicious actor with access to UniFi Access management network. Affected Products: UniFi Access Reader Pro (Version 2.14.21 and earlier) UniFi Access G2 Reader Pro…

  • CVE-2025-26063CriJul 31, 2025
    Intelbras
    RX1500
    risk 0.64cvss 9.8epss 0.01

    An issue in Intelbras RX1500 v2.2.9 and RX3000 v1.0.11 allows unauthenticated attackers to execute arbitrary code via injecting a crafted payload into the ESSID name when creating a network.

  • CVE-2025-52046CriJul 17, 2025
    Totolink
    A3300R
    risk 0.64cvss 9.8epss 0.05

    Totolink A3300R V17.0.0cu.596_B20250515 was found to contain a command injection vulnerability in the sub_4197C0 function via the mac and desc parameters. This vulnerability allows unauthenticated attackers to execute arbitrary commands via a crafted request.

  • CVE-2025-49836CriJul 15, 2025
    Rvc Boss
    Gpt Sovits Webui
    risk 0.64cvss 9.8epss 0.03

    GPT-SoVITS-WebUI is a voice conversion and text-to-speech webUI. In versions 20250228v3 and prior, there is a command injection vulnerability in webui.py change_label function. path_list takes user input, which is passed to the change_label function, which concatenates the user…

  • CVE-2025-49835CriJul 15, 2025
    Rvc Boss
    Gpt Sovits Webui
    risk 0.64cvss 9.8epss 0.03

    GPT-SoVITS-WebUI is a voice conversion and text-to-speech webUI. In versions 20250228v3 and prior, there is a command injection vulnerability in webui.py open_asr function. asr_inp_dir (and a number of other variables) takes user input, which is passed to the open_asr function,…

  • CVE-2025-49834CriJul 15, 2025
    Rvc Boss
    Gpt Sovits Webui
    risk 0.64cvss 9.8epss 0.03

    GPT-SoVITS-WebUI is a voice conversion and text-to-speech webUI. In versions 20250228v3 and prior, there is a command injection vulnerability in webui.py open_denoise function. denoise_inp_dir and denoise_opt_dir take user input, which is passed to the open_denoise function,…

  • CVE-2025-49833CriJul 15, 2025
    Rvc Boss
    Gpt Sovits Webui
    risk 0.64cvss 9.8epss 0.03

    GPT-SoVITS-WebUI is a voice conversion and text-to-speech webUI. In versions 20250228v3 and prior, there is a command injection vulnerability in the webui.py open_slice function. slice_opt_root and slice-inp-path takes user input, which is passed to the open_slice function,…

  • CVE-2025-50756CriJul 14, 2025
    Wavlink
    WN535K3
    risk 0.64cvss 9.8epss 0.02

    Wavlink WN535K3 20191010 was found to contain a command injection vulnerability in the set_sys_adm function via the newpass parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.

  • CVE-2025-45931CriJun 30, 2025
    Dlink
    DIR-816A2
    risk 0.64cvss 9.8epss 0.01

    An issue D-Link DIR-816-A2 DIR-816A2_FWv1.10CNB05_R1B011D88210 allows a remote attacker to execute arbitrary code via system() function in the bin/goahead file

  • CVE-2025-45987CriJun 13, 2025
    Blink
    BL-WR9000
    risk 0.64cvss 9.8epss 0.02

    Blink routers BL-WR9000 V2.4.9 , BL-AC2100_AZ3 V1.0.4, BL-X10_AC8 v1.0.5 , BL-LTE300 v1.2.3, BL-F1200_AT1 v1.0.0, BL-X26_AC8 v1.2.8, BLAC450M_AE4 v4.0.0 and BL-X26_DA3 v1.2.7 were discovered to contain multiple command injection vulnerabilities via the dns1 and dns2 parameters…