VYPR

CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

BaseStableLikelihood: High

Description

The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Hierarchy (View 1000)

Parents

Children

none

Related attack patterns (CAPEC)

CAPEC-108 · CAPEC-15 · CAPEC-43 · CAPEC-6 · CAPEC-88

CVEs mapped to this weakness (6,475)

page 1 of 324
  • CVE-2024-51378CriKEVOct 29, 2024
    Cyberpanel
    Cyberpanel
    risk 0.94cvss 10.0epss 0.95

    getresetstatus in dns/views.py and ftp/views.py in CyberPanel (aka Cyber Panel) before 1c0c6cb allows remote attackers to bypass authentication and execute arbitrary commands via /dns/getresetstatus or /ftp/getresetstatus by bypassing secMiddleware (which is only for a POST…

  • CVE-2019-15107CriKEVAug 16, 2019
    Webmin
    Webmin
    risk 0.93cvss 9.8epss 1.00

    An issue was discovered in Webmin <=1.920. The parameter old in password_change.cgi contains a command injection vulnerability.

  • CVE-2018-10562CriKEVMay 4, 2018
    Dasan
    GPON home routers
    risk 0.93cvss 9.8epss 1.00

    An issue was discovered on Dasan GPON home routers. Command Injection can occur via the dest_host parameter in a diag_action=ping request to a GponForm/diag_Form URI. Because the router saves ping results in /tmp and transmits them to the user when the user revisits /diag.html,…

  • CVE-2026-1731CriKEVFeb 6, 2026
    Etrust
    Remote Support
    risk 0.92cvss 9.8epss 0.89

    BeyondTrust Remote Support (RS) and certain older versions of Privileged Remote Access (PRA) contain a critical pre-authentication remote code execution vulnerability. By sending specially crafted requests, an unauthenticated remote attacker may be able to execute operating…

  • CVE-2018-11138CriKEVMay 31, 2018
    Quest
    Kace System Management Appliance
    risk 0.92cvss 9.8epss 0.92

    The '/common/download_agent_installer.php' script in the Quest KACE System Management Appliance 8.0.318 is accessible by anonymous users and can be abused to execute arbitrary commands on the system.

  • CVE-2023-43208CriKEVOct 26, 2023
    NextGen
    Mirth Connect
    risk 0.91cvss 9.8epss 0.83

    NextGen Healthcare Mirth Connect before version 4.4.1 is vulnerable to unauthenticated remote code execution. Note that this vulnerability is caused by the incomplete patch of CVE-2023-37679.

  • CVE-2019-16057CriKEVSep 16, 2019
    Dlink
    DNS-320
    risk 0.89cvss 9.8epss 0.87

    The login_mgr.cgi script in D-Link DNS-320 through 2.05.B10 is vulnerable to remote command injection.

  • CVE-2018-6530CriKEVMar 6, 2018
    Dlink
    DIR-868L
    risk 0.89cvss 9.8epss 0.97

    OS command injection vulnerability in soap.cgi (soapcgi_main in cgibin) in D-Link DIR-880L DIR-880L_REVA_FIRMWARE_PATCH_1.08B04 and previous versions, DIR-868L DIR868LA1_FW112b04 and previous versions, DIR-65L DIR-865L_REVA_FIRMWARE_PATCH_1.08.B01 and previous versions, and…

  • CVE-2024-1212CriKEVFeb 21, 2024
    Progress (organisation)
    Loadmaster
    risk 0.88cvss 10.0epss 0.95

    Unauthenticated remote attackers can access the system through the LoadMaster management interface, enabling arbitrary system command execution.

  • CVE-2023-28771CriKEVApr 25, 2023
    Zyxel
    ATP series
    risk 0.87cvss 9.8epss 0.99

    Improper error message handling in Zyxel ZyWALL/USG series firmware versions 4.60 through 4.73, VPN series firmware versions 4.60 through 5.35, USG FLEX series firmware versions 4.60 through 5.35, and ATP series firmware versions 4.60 through 5.35, which could allow an…

  • CVE-2022-44877CriKEVJan 5, 2023
    CWP
    Control Web Panel
    risk 0.87cvss 9.8epss 1.00

    login/index.php in CWP (aka Control Web Panel or CentOS Web Panel) 7 before 0.9.8.1147 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the login parameter.

  • CVE-2022-29303CriKEVMay 12, 2022
    SolarView
    Compact
    risk 0.87cvss 9.8epss 0.98

    SolarView Compact ver.6.00 was discovered to contain a command injection vulnerability via conf_mail.php.

  • CVE-2022-30525CriKEVMay 12, 2022
    Zyxel
    Usg Flex 200 Firmware
    risk 0.87cvss 9.8epss 1.00

    A OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware versions 5.00 through 5.21 Patch 1, USG FLEX 200 firmware versions 5.00 through 5.21 Patch 1, USG FLEX 500 firmware versions 5.00 through 5.21 Patch 1, USG FLEX 700 firmware versions 5.00…

  • CVE-2021-36260CriKEVSep 22, 2021
    Hikvision
    Hikvision
    risk 0.87cvss 9.8epss 1.00

    A command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation, attacker can exploit the vulnerability to launch a command injection attack by sending some messages with malicious commands.

  • CVE-2021-1498CriKEVMay 6, 2021
    Cisco Systems, Inc.
    HyperFlex HX
    risk 0.87cvss 9.8epss 1.00

    Multiple vulnerabilities in the web-based management interface of Cisco HyperFlex HX could allow an unauthenticated, remote attacker to perform command injection attacks against an affected device. For more information about these vulnerabilities, see the Details section of this…

  • CVE-2021-1497CriKEVMay 6, 2021
    Cisco Systems, Inc.
    HyperFlex HX
    risk 0.87cvss 9.8epss 1.00

    Multiple vulnerabilities in the web-based management interface of Cisco HyperFlex HX could allow an unauthenticated, remote attacker to perform command injection attacks against an affected device. For more information about these vulnerabilities, see the Details section of this…

  • CVE-2020-8515CriKEVFeb 1, 2020
    Draytek
    Vigor3900
    risk 0.87cvss 9.8epss 1.00

    DrayTek Vigor2960 1.3.1_Beta, Vigor3900 1.4.4_Beta, and Vigor300B 1.3.3_Beta, 1.4.2.1_Beta, and 1.4.4_Beta devices allow remote code execution as root (without authentication) via shell metacharacters to the cgi-bin/mainfunction.cgi URI. This issue has been fixed in…

  • CVE-2019-3929CriKEVApr 30, 2019
    Infocus
    Liteshow3 Firmware
    risk 0.87cvss 9.8epss 0.99

    The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent WiPG-1600W before firmware 2.4.1.19, Extron ShareLink 200/250 firmware 2.0.3.4, Teq AV IT WIPS710 firmware 1.1.0.7, SHARP PN-L703WA firmware…

  • CVE-2014-7169CriKEVSep 25, 2014
    GNU
    Bash
    risk 0.87cvss 9.8epss 1.00

    GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to write to files or possibly have unknown other impact via a crafted environment, as demonstrated by…

  • CVE-2014-6271CriKEVSep 24, 2014
    GNU
    Bash
    risk 0.87cvss 9.8epss 1.00

    GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd,…