VYPR

CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

BaseStableLikelihood: High

Description

The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Hierarchy (View 1000)

Parents

Children

none

Related attack patterns (CAPEC)

CAPEC-108 · CAPEC-15 · CAPEC-43 · CAPEC-6 · CAPEC-88

CVEs mapped to this weakness (6,475)

page 50 of 324
  • CVE-2023-40837CriAug 30, 2023
    Tenda
    AC6
    risk 0.64cvss 9.8epss 0.01

    Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin function 'sub_ADD50' contains a command execution vulnerability. In the "formSetIptv" function, obtaining the "list" and "vlanId" fields, unfiltered passing these two fields as parameters to the "sub_ADD50" function to execute…

  • CVE-2023-38027CriAug 28, 2023
    SpotCam
    SpotCam Sense
    risk 0.64cvss 9.8epss 0.01

    SpotCam Co., Ltd. SpotCam Sense’s hidden Telnet function has a vulnerability of OS command injection. An remote unauthenticated attacker can exploit this vulnerability to execute command injection attack to perform arbitrary system commands or disrupt service.

  • CVE-2023-38025CriAug 28, 2023
    SpotCam Co., Ltd.
    SpotCam FHD 2
    risk 0.64cvss 9.8epss 0.01

    SpotCam Co., Ltd. SpotCam FHD 2’s hidden Telnet function has a vulnerability of OS command injection. An remote unauthenticated attacker can exploit this vulnerability to execute command injection attack to arbitrary system commands or disrupt service.

  • CVE-2023-40069CriAug 18, 2023
    ELECOM CO.,LTD.
    WRC-1750GHBK
    risk 0.64cvss 9.8epss 0.01

    OS command injection vulnerability in ELECOM wireless LAN routers allows an attacker who can access the product to execute an arbitrary OS command by sending a specially crafted request. Affected products and versions are as follows: WRC-F1167ACF all versions, WRC-1750GHBK all…

  • CVE-2023-35893CriAug 16, 2023
    IBM
    Security Guardium
    risk 0.64cvss 9.9epss 0.01

    IBM Security Guardium 10.6, 11.3, 11.4, and 11.5 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-Force ID: 258824.

  • CVE-2023-38692CriAug 4, 2023
    cloudexplorer-dev
    cloudexplorer-lite
    risk 0.64cvss 9.8epss 0.03

    CloudExplorer Lite is an open source, lightweight cloud management platform. Versions prior to 1.3.1 contain a command injection vulnerability in the installation function in module management. The vulnerability has been fixed in v1.3.1. There are no known workarounds aside from…

  • CVE-2023-33377CriAug 4, 2023
    Connected IO
    Connected IO
    risk 0.64cvss 9.8epss 0.02

    Connected IO v2.1.0 and prior has an OS command injection vulnerability in the set firewall command in part of its communication protocol, enabling attackers to execute arbitrary OS commands on devices.

  • CVE-2023-33374CriAug 4, 2023
    Connected IO
    Connected IO
    risk 0.64cvss 9.8epss 0.01

    Connected IO v2.1.0 and prior has a command as part of its communication protocol allowing the management platform to specify arbitrary OS commands for devices to execute. Attackers abusing this dangerous functionality may issue all devices OS commands to execute, resulting in…

  • CVE-2023-35861CriJul 31, 2023
    Supermicro
    H12DST-B
    risk 0.64cvss 9.8epss 0.02

    A shell-injection vulnerability in email notifications on Supermicro motherboards (such as H12DST-B before 03.10.35) allows remote attackers to inject execute arbitrary commands as root on the BMC.

  • CVE-2023-37903CriJul 21, 2023
    Patriksimek
    Vm2
    risk 0.64cvss 9.8epss 0.04

    vm2 is an open source vm/sandbox for Node.js. In vm2 for versions up to and including 3.9.19, Node.js custom inspect function allows attackers to escape the sandbox and run arbitrary code. This may result in Remote Code Execution, assuming the attacker has arbitrary code…

  • CVE-2023-37292CriJul 21, 2023
    Hgiga
    Isherlock
    risk 0.64cvss 9.8epss 0.01

    Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in HGiga iSherlock 4.5 (iSherlock-user modules), HGiga iSherlock 5.5 (iSherlock-user modules) allows OS Command Injection.This issue affects iSherlock 4.5: before…

  • CVE-2023-36670CriJul 18, 2023
    Go Kratos
    Kratos
    risk 0.64cvss 9.8epss 0.01

    A remotely exploitable command injection vulnerability was found on the Kratos NGC-IDU 9.1.0.4. An attacker can execute arbitrary Linux commands as root by sending crafted TCP requests to the device.

  • CVE-2023-38378CriJul 16, 2023
    RIGOL
    MSO5000
    risk 0.64cvss 9.8epss 0.01

    The web interface on the RIGOL MSO5000 digital oscilloscope with firmware 00.01.03.00.03 allows remote attackers to execute arbitrary code via shell metacharacters in pass1 to the webcontrol changepwd.cgi application.

  • CVE-2023-37173CriJul 7, 2023
    Totolink
    A3300R
    risk 0.64cvss 9.8epss 0.02

    TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the command parameter in the setTracerouteCfg function.

  • CVE-2023-37172CriJul 7, 2023
    Totolink
    A3300R
    risk 0.64cvss 9.8epss 0.02

    TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the ip parameter in the setDiagnosisCfg function.

  • CVE-2023-37171CriJul 7, 2023
    Totolink
    A3300R
    risk 0.64cvss 9.8epss 0.02

    TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the admuser parameter in the setPasswordCfg function.

  • CVE-2023-37170CriJul 7, 2023
    Totolink
    A3300R
    risk 0.64cvss 9.8epss 0.02

    TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain an unauthenticated remote code execution (RCE) vulnerability via the lang parameter in the setLanguageCfg function.

  • CVE-2022-44720CriJun 29, 2023
    Ucopia
    Weblib
    risk 0.64cvss 9.8epss 0.03

    An issue was discovered in Weblib Ucopia before 6.0.13. OS Command Injection injection can occur, related to chroot.

  • CVE-2022-48472CriJun 16, 2023
    Huawei
    BiSheng-WNM FW
    risk 0.64cvss 9.8epss 0.01

    A Huawei printer has a system command injection vulnerability. Successful exploitation could lead to remote code execution. Affected product versions include:BiSheng-WNM versions OTA-BiSheng-FW-2.0.0.211-beta,BiSheng-WNM FW 3.0.0.325,BiSheng-WNM FW 2.0.0.211.

  • CVE-2023-30764CriJun 13, 2023
    KB
    KB-AHR04D
    risk 0.64cvss 9.8epss 0.02

    OS command injection vulnerability exists in KB-AHR series and KB-IRIP series. If this vulnerability is exploited, an arbitrary OS command may be executed on the product or the device settings may be altered. Affected products and versions are as follows: KB-AHR04D versions…