VYPR

CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

BaseStableLikelihood: High

Description

The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Hierarchy (View 1000)

Parents

Children

none

Related attack patterns (CAPEC)

CAPEC-108 · CAPEC-15 · CAPEC-43 · CAPEC-6 · CAPEC-88

CVEs mapped to this weakness (6,529)

page 106 of 327
  • CVE-2019-3702HigMay 13, 2019
    Lifesize
    Icon
    risk 0.58cvss 8.8epss 0.05

    A Remote Code Execution issue in the DNS Query Web UI in Lifesize Icon LS_RM3_3.7.0 (2421) allows remote authenticated attackers to execute arbitrary commands via a crafted DNS Query address field in a JSON API request.

  • CVE-2018-17990HigApr 1, 2019
    Dlink
    DSL-3782
    risk 0.58cvss 8.8epss 0.04

    An issue was discovered on D-Link DSL-3782 devices with firmware 1.01. An OS command injection vulnerability in Acl.asp allows a remote authenticated attacker to execute arbitrary OS commands via the ScrIPaddrEndTXT parameter.

  • CVE-2018-5757HigApr 1, 2019
    AudioCodes
    450HD IP Phone
    risk 0.58cvss 8.8epss 0.08

    An issue was discovered on AudioCodes 450HD IP Phone devices with firmware 3.0.0.535.106. The traceroute and ping functionality, which uses a parameter in a request to command.cgi from the Monitoring page in the web UI, unsafely puts user-alterable data directly into an OS…

  • CVE-2019-10656HigMar 30, 2019
    Grandstream
    GWN7000
    risk 0.58cvss 8.8epss 0.04

    Grandstream GWN7000 before 1.0.6.32 devices allow remote authenticated users to execute arbitrary code via shell metacharacters in the filename in a /ubus/uci.apply update_nds_webroot_from_tmp API call.

  • CVE-2019-1614HigMar 11, 2019
    Cisco Systems, Inc.
    NX-OS Software
    risk 0.58cvss 8.8epss 0.04

    A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an authenticated, remote attacker to execute arbitrary commands with root privileges. The vulnerability is due to incorrect input validation of user-supplied data by the NX-API subsystem. An attacker could…

  • CVE-2019-3920HigMar 5, 2019
    Alcatel Lucent
    I-240W-Q GPON ONT
    risk 0.58cvss 8.8epss 0.04

    The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 is vulnerable to authenticated command injection via crafted HTTP request sent by a remote, authenticated attacker to /GponForm/device_Form?script/.

  • CVE-2019-3919HigMar 5, 2019
    Alcatel Lucent
    I-240W-Q GPON ONT
    risk 0.58cvss 8.8epss 0.04

    The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 is vulnerable to command injection via crafted HTTP request sent by a remote, authenticated attacker to /GponForm/usb_restore_Form?script/.

  • CVE-2019-8319HigFeb 13, 2019
    Dlink
    Dir878 Firmware
    risk 0.58cvss 8.8epss 0.08

    An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted…

  • CVE-2019-8318HigFeb 13, 2019
    Dlink
    Dir878 Firmware
    risk 0.58cvss 8.8epss 0.06

    An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted…

  • CVE-2019-8317HigFeb 13, 2019
    Dlink
    Dir878 Firmware
    risk 0.58cvss 8.8epss 0.06

    An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted…

  • CVE-2019-8316HigFeb 13, 2019
    Dlink
    Dir878 Firmware
    risk 0.58cvss 8.8epss 0.07

    An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted…

  • CVE-2019-8315HigFeb 13, 2019
    Dlink
    Dir878 Firmware
    risk 0.58cvss 8.8epss 0.06

    An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted…

  • CVE-2019-8314HigFeb 13, 2019
    Dlink
    Dir878 Firmware
    risk 0.58cvss 8.8epss 0.06

    An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted…

  • CVE-2019-8313HigFeb 13, 2019
    Dlink
    Dir878 Firmware
    risk 0.58cvss 8.8epss 0.06

    An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted…

  • CVE-2019-8312HigFeb 13, 2019
    Dlink
    Dir878 Firmware
    risk 0.58cvss 8.8epss 0.07

    An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted…

  • CVE-2019-7632HigFeb 8, 2019
    Lifesize
    Room
    risk 0.58cvss 8.8epss 0.06

    LifeSize Team, Room, Passport, and Networker 220 devices allow Authenticated Remote OS Command Injection, as demonstrated by shell metacharacters in the support/mtusize.php mtu_size parameter. The lifesize default password for the cli account may sometimes be used for…

  • CVE-2019-6487HigJan 18, 2019
    TP-Link
    TL-WDR5620
    risk 0.58cvss 8.8epss 0.09

    TP-Link WDR Series devices through firmware v3 (such as TL-WDR5620 V3.0) are affected by command injection (after login) leading to remote code execution, because shell metacharacters can be included in the weather get_weather_observe citycode field.

  • CVE-2018-20727HigJan 17, 2019
    Nedi
    Nedi
    risk 0.58cvss 8.8epss 0.06

    Multiple command injection vulnerabilities in NeDi before 1.7Cp3 allow authenticated users to execute code on the server side via the flt parameter to Nodes-Traffic.php, the dv parameter to Devices-Graph.php, or the tit parameter to drawmap.php.

  • CVE-2018-20057HigDec 11, 2018
    Dlink
    DIR-619L
    risk 0.58cvss 8.8epss 0.07

    An issue was discovered in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 and DIR-605L Rev.B 2.12B1 devices. goform/formSysCmd allows remote authenticated users to execute arbitrary OS commands via the sysCmd POST parameter.

  • CVE-2018-19659HigDec 6, 2018
    Moxa
    NPort W2x50A
    risk 0.58cvss 8.8epss 0.04

    An exploitable authenticated command-injection vulnerability exists in the web server functionality of Moxa NPort W2x50A products with firmware before 2.2 Build_18082311. A specially crafted HTTP POST request to /goform/net_WebPingGetValue can result in running OS commands as…