VYPR

CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

BaseStableLikelihood: High

Description

The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Hierarchy (View 1000)

Parents

Children

none

Related attack patterns (CAPEC)

CAPEC-108 · CAPEC-15 · CAPEC-43 · CAPEC-6 · CAPEC-88

CVEs mapped to this weakness (6,524)

page 232 of 327
  • CVE-2022-23667HigMay 16, 2022
    risk 0.47cvss 7.2epss 0.01

    A authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and below. Aruba has released updates to ClearPass Policy Manager that address this security…

  • CVE-2022-26007HigMay 12, 2022
    risk 0.47cvss 7.2epss 0.06

    An OS command injection vulnerability exists in the console factory functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted network request can lead to command execution. An attacker can send a sequence of requests to trigger this vulnerability.

  • CVE-2022-27224HigMay 9, 2022
    risk 0.47cvss 7.2epss 0.05

    An issue was discovered in Galleon NTS-6002-GPS 4.14.103-Galleon-NTS-6002.V12 4. An authenticated attacker can perform command injection as root via shell metacharacters within the Network Tools section of the web-management interface. All three networking tools are affected…

  • CVE-2021-24009HigApr 6, 2022
    risk 0.47cvss 7.2epss 0.01

    Multiple improper neutralization of special elements used in an OS command vulnerabilities (CWE-78) in the Web GUI of FortiWAN before 4.5.9 may allow an authenticated attacker to execute arbitrary commands on the underlying system's shell via specifically crafted HTTP requests.

  • CVE-2022-0557HigFeb 11, 2022
    risk 0.47cvss 7.2epss 0.51

    OS Command Injection in Packagist microweber/microweber prior to 1.2.11.

  • CVE-2021-40411HigJan 28, 2022
    risk 0.47cvss 7.2epss 0.05

    An OS command injection vulnerability exists in the device network settings functionality of reolink RLC-410W v3.0.0.136_20121102. At [6] the dns_data->dns2 variable, that has the value of the dns2 parameter provided through the SetLocalLink API, is not validated properly. This…

  • CVE-2020-28885HigJan 28, 2022
    risk 0.47cvss 7.2epss 0.02

    Liferay Portal Server tested on 7.3.5 GA6, 7.2.0 GA1 is affected by OS Command Injection. An administrator user can inject commands through the Gogo Shell module to execute any OS command on the Liferay Portal Sever. NOTE: The developer disputes this as a vulnerability since it…

  • CVE-2020-28884HigJan 28, 2022
    risk 0.47cvss 7.2epss 0.02

    Liferay Portal Server tested on 7.3.5 GA6, 7.2.0 GA1 is affected by OS Command Injection. An administrator user can inject Groovy script to execute any OS command on the Liferay Portal Sever. NOTE: The developer disputes this as a vulnerability since it is a feature for…

  • CVE-2021-36296HigJan 25, 2022
    risk 0.47cvss 7.2epss 0.03

    Dell VNX2 OE for File versions 8.1.21.266 and earlier, contain an authenticated remote code execution vulnerability. A remote malicious user with privileges may exploit this vulnerability to execute commands on the system.

  • CVE-2021-36295HigJan 25, 2022
    risk 0.47cvss 7.2epss 0.03

    Dell VNX2 OE for File versions 8.1.21.266 and earlier, contain an authenticated remote code execution vulnerability. A remote malicious user with privileges may exploit this vulnerability to execute commands on the system.

  • CVE-2021-33827HigJan 15, 2022
    risk 0.47cvss 7.2epss 0.02

    The files_antivirus component before 1.0.0 for ownCloud allows OS Command Injection via the administration settings.

  • CVE-2021-23862HigDec 8, 2021
    risk 0.47cvss 7.2epss 0.01

    A crafted configuration packet sent by an authenticated administrative user can be used to execute arbitrary commands in system context. This issue also affects installations of the VRM, DIVAR IP, BVMS with VRM installed, the VIDEOJET decoder (VJD-7513 and VJD-8000).

  • CVE-2021-3723HigNov 12, 2021
    risk 0.47cvss 7.2epss 0.02

    A command injection vulnerability was reported in the Integrated Management Module (IMM) of legacy IBM System x 3550 M3 and IBM System x 3650 M3 servers that could allow the execution of operating system commands over an authenticated SSH or Telnet session.

  • CVE-2021-39474HigNov 10, 2021
    risk 0.47cvss 7.2epss 0.02

    Vulnerability in the product Docsis 3.0 UBC1319BA00 Router supported affected version 1319010201r009. The vulnerability allows an attacker with privileges and network access through the ping.cmd component to execute commands on the device.

  • CVE-2021-37732HigOct 12, 2021
    risk 0.47cvss 7.2epss 0.03

    A remote arbitrary command execution vulnerability was discovered in HPE Aruba Instant (IAP) version(s): Aruba Instant 6.4.x.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x.x: 6.5.4.18 and below; Aruba Instant 8.5.x.x: 8.5.0.11 and below; Aruba Instant 8.6.x.x: 8.6.0.6 and…

  • CVE-2021-37730HigOct 12, 2021
    risk 0.47cvss 7.2epss 0.03

    A remote arbitrary command execution vulnerability was discovered in HPE Aruba Instant (IAP) version(s): Aruba Instant 6.4.x.x: 6.4.4.8-4.2.4.18 and below; Aruba Instant 6.5.x.x: 6.5.4.20 and below; Aruba Instant 8.5.x.x: 8.5.0.12 and below; Aruba Instant 8.6.x.x: 8.6.0.11 and…

  • CVE-2021-37727HigOct 12, 2021
    risk 0.47cvss 7.2epss 0.03

    A remote arbitrary command execution vulnerability was discovered in HPE Aruba Instant (IAP) version(s): 6.4.x.x: 6.4.4.8-4.2.4.18 and below; Aruba Instant 6.5.x.x: 6.5.4.20 and below; Aruba Instant 8.5.x.x: 8.5.0.12 and below; Aruba Instant 8.6.x.x: 8.6.0.11 and below; Aruba…

  • CVE-2021-20122HigOct 11, 2021
    risk 0.47cvss 7.2epss 0.07

    The Telus Wi-Fi Hub (PRV65B444A-S-TS) with firmware version 3.00.20 is affected by an authenticated command injection vulnerability in multiple parameters passed to tr69_cmd.cgi. A remote attacker connected to the router's LAN and authenticated with a super user account, or…

  • CVE-2021-34352HigOct 1, 2021
    risk 0.47cvss 7.2epss 0.01

    A command injection vulnerability has been reported to affect QNAP device running QVR. If exploited, this vulnerability could allow remote attackers to run arbitrary commands. We have already fixed this vulnerability in the following versions of QVR: QVR 5.1.5 build 20210902 and…

  • CVE-2021-35028HigSep 29, 2021
    risk 0.47cvss 7.3epss 0.00

    A command injection vulnerability in the CGI program of the Zyxel VPN2S firmware version 1.12 could allow an authenticated, local user to execute arbitrary OS commands.