VYPR

CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

BaseStableLikelihood: High

Description

The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Hierarchy (View 1000)

Parents

Children

none

Related attack patterns (CAPEC)

CAPEC-108 · CAPEC-15 · CAPEC-43 · CAPEC-6 · CAPEC-88

CVEs mapped to this weakness (6,578)

page 178 of 329
  • CVE-2023-34277HigMay 3, 2024
    Dlink
    DIR-2150
    risk 0.52cvss 8.0epss 0.02

    D-Link DIR-2150 SetSysEmailSettings AccountName Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2150 routers. Although authentication is required to…

  • CVE-2023-34276HigMay 3, 2024
    Dlink
    DIR-2150
    risk 0.52cvss 8.0epss 0.02

    D-Link DIR-2150 SetTriggerPPPoEValidate Username Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2150 routers. Although authentication is required to…

  • CVE-2023-34275HigMay 3, 2024
    Dlink
    DIR-2150
    risk 0.52cvss 8.0epss 0.02

    D-Link DIR-2150 SetNTPServerSettings Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2150 routers. Although authentication is required to exploit this…

  • CVE-2023-27367HigMay 3, 2024
    Netgear
    RAX30
    risk 0.52cvss 8.0epss 0.01

    NETGEAR RAX30 libcms_cli Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30 routers. Although authentication is required to exploit this vulnerability,…

  • CVE-2023-27356HigMay 3, 2024
    Netgear
    RAX30
    risk 0.52cvss 8.0epss 0.01

    NETGEAR RAX30 logCtrl Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30 routers. Although authentication is required to exploit this vulnerability, the…

  • CVE-2024-1180HigApr 3, 2024
    TP-Link
    Omada ER605
    risk 0.52cvss 8.0epss 0.01

    TP-Link Omada ER605 Access Control Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Omada ER605. Authentication is required to exploit this vulnerability. …

  • CVE-2024-30645HigMar 29, 2024
    Tenda
    AC15
    risk 0.52cvss 8.0epss 0.01

    Tenda AC15V1.0 V15.03.20_multi has a command injection vulnerability via the deviceName parameter.

  • CVE-2024-27521HigMar 26, 2024
    Totolink
    A3300R
    risk 0.52cvss 8.0epss 0.01

    TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain an unauthenticated remote command execution (RCE) vulnerability via multiple parameters in the "setOpModeCfg" function. This security issue allows an attacker to take complete control of the device. In detail,…

  • CVE-2024-25851HigFeb 22, 2024
    Netis
    WF2780
    risk 0.52cvss 8.0epss 0.02

    Netis WF2780 v2.1.40144 was discovered to contain a command injection vulnerability via the config_sequence parameter in other_para of cgitest.cgi.

  • CVE-2024-23812HigFeb 13, 2024
    Siemens Foundation
    Sinec Nms
    risk 0.52cvss 8.0epss 0.01

    A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP1). The affected application incorrectly neutralizes special elements when creating a report which could lead to command injection.

  • CVE-2024-21821HigJan 11, 2024
    TP-Link
    Archer Axe75 Firmware
    risk 0.52cvss 8.0epss 0.00

    Multiple TP-LINK products allow a network-adjacent authenticated attacker with access to the product from the LAN port or Wi-Fi to execute arbitrary OS commands.

  • CVE-2023-43752HigNov 16, 2023
    WRC
    WRC-X3000GSN
    risk 0.52cvss 8.0epss 0.01

    OS command injection vulnerability in WRC-X3000GS2-W v1.05 and earlier, WRC-X3000GS2-B v1.05 and earlier, and WRC-X3000GS2A-B v1.05 and earlier allows a network-adjacent authenticated user to execute an arbitrary OS command by sending a specially crafted request.

  • CVE-2023-40531HigSep 6, 2023
    TP-Link
    Archer Ax6000 Firmware
    risk 0.52cvss 8.0epss 0.00

    Archer AX6000 firmware versions prior to 'Archer AX6000(JP)_V1_1.3.0 Build 20221208' allows a network-adjacent authenticated attacker to execute arbitrary OS commands.

  • CVE-2023-40357HigSep 6, 2023
    TP-Link
    Archer Ax10 Firmware
    risk 0.52cvss 8.0epss 0.00

    Multiple TP-LINK products allow a network-adjacent authenticated attacker to execute arbitrary OS commands. Affected products/versions are as follows: Archer AX50 firmware versions prior to 'Archer AX50(JP)_V1_230529', Archer A10 firmware versions prior to 'Archer…

  • CVE-2023-40193HigSep 6, 2023
    TP-Link
    Deco M4 Firmware
    risk 0.52cvss 8.0epss 0.00

    Deco M4 firmware versions prior to 'Deco M4(JP)_V2_1.5.8 Build 20230619' allows a network-adjacent authenticated attacker to execute arbitrary OS commands.

  • CVE-2023-39935HigSep 6, 2023
    TP-Link
    Archer C5400 Firmware
    risk 0.52cvss 8.0epss 0.00

    Archer C5400 firmware versions prior to 'Archer C5400(JP)_V2_230506' allows a network-adjacent authenticated attacker to execute arbitrary OS commands.

  • CVE-2023-39224HigSep 6, 2023
    TP-Link
    Archer C7 Firmware
    risk 0.52cvss 8.0epss 0.00

    Archer C5 firmware all versions and Archer C7 firmware versions prior to 'Archer C7(JP)_V2_230602' allow a network-adjacent authenticated attacker to execute arbitrary OS commands. Note that Archer C5 is no longer supported, therefore the update for this product is not provided.

  • CVE-2023-38588HigSep 6, 2023
    TP-Link
    Archer C3150 Firmware
    risk 0.52cvss 8.0epss 0.00

    Archer C3150 firmware versions prior to 'Archer C3150(JP)_V2_230511' allows a network-adjacent authenticated attacker to execute arbitrary OS commands.

  • CVE-2023-31188HigSep 6, 2023
    TP-Link
    Archer C55 Firmware
    risk 0.52cvss 8.0epss 0.00

    Multiple TP-LINK products allow a network-adjacent authenticated attacker to execute arbitrary OS commands. Affected products/versions are as follows: Archer C50 firmware versions prior to 'Archer C50(JP)_V3_230505', Archer C55 firmware versions prior to 'Archer…

  • CVE-2023-34141HigJul 17, 2023
    Zyxel
    Nxc2500 Firmware
    risk 0.52cvss 8.0epss 0.01

    A command injection vulnerability in the access point (AP) management feature of the Zyxel ATP series firmware versions 5.00 through 5.36 Patch 2, USG FLEX series firmware versions 5.00 through 5.36 Patch 2, USG FLEX 50(W) series firmware versions 5.00 through 5.36 Patch 2,…