VYPR

CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

BaseStableLikelihood: High

Description

The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Hierarchy (View 1000)

Parents

Children

none

Related attack patterns (CAPEC)

CAPEC-108 · CAPEC-15 · CAPEC-43 · CAPEC-6 · CAPEC-88

CVEs mapped to this weakness (6,835)

page 51 of 342
  • CVE-2023-33271CriOct 3, 2023
    Dts
    Monitoring
    risk 0.64cvss 9.8epss 0.02

    An issue was discovered in DTS Monitoring 3.57.0. The parameter common_name within the SSL Certificate check function is vulnerable to OS command injection (blind).

  • CVE-2023-33270CriOct 3, 2023
    Dts
    Monitoring
    risk 0.64cvss 9.8epss 0.03

    An issue was discovered in DTS Monitoring 3.57.0. The parameter url within the Curl check function is vulnerable to OS command injection (blind).

  • CVE-2023-33269CriOct 3, 2023
    Dts
    Monitoring
    risk 0.64cvss 9.8epss 0.02

    An issue was discovered in DTS Monitoring 3.57.0. The parameter options within the WGET check function is vulnerable to OS command injection (blind).

  • CVE-2023-33268CriOct 3, 2023
    Dts
    Monitoring
    risk 0.64cvss 9.8epss 0.01

    An issue was discovered in DTS Monitoring 3.57.0. The parameter port within the SSL Certificate check function is vulnerable to OS command injection (blind).

  • CVE-2023-43893CriOct 2, 2023
    Netis
    N3Mv2
    risk 0.64cvss 9.8epss 0.02

    Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the wakeup_mac parameter in the Wake-On-LAN (WoL) function. This vulnerability is exploited via a crafted payload.

  • CVE-2023-43892CriOct 2, 2023
    Netis
    N3Mv2
    risk 0.64cvss 9.8epss 0.02

    Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the Hostname parameter within the WAN settings. This vulnerability is exploited via a crafted payload.

  • CVE-2023-44080CriSep 27, 2023
    PGYER
    codefever
    risk 0.64cvss 9.8epss 0.01

    An issue in PGYER codefever v.2023.8.14-2ce4006 allows a remote attacker to execute arbitrary code via a crafted request to the branchList component.

  • CVE-2023-3767CriSep 27, 2023
    EasyPHP
    Webserver
    risk 0.64cvss 9.8epss 0.01

    An OS command injection vulnerability has been found on EasyPHP Webserver affecting version 14.1. This vulnerability could allow an attacker to get full access to the system by sending a specially crafted exploit to the /index.php?zone=settings parameter.

  • CVE-2023-43130CriSep 22, 2023
    Dlink
    DIR-806 1200M11AC
    risk 0.64cvss 9.8epss 0.02

    D-LINK DIR-806 1200M11AC wireless router DIR806A1_FW100CNb11 is vulnerable to command injection.

  • CVE-2023-43129CriSep 22, 2023
    Dlink
    DIR-806
    risk 0.64cvss 9.8epss 0.02

    D-LINK DIR-806 1200M11AC wireless router DIR806A1_FW100CNb11 is vulnerable to command injection due to lax filtering of REMOTE_PORT parameters.

  • CVE-2023-28614CriSep 15, 2023
    Freewill
    iFIS
    risk 0.64cvss 9.8epss 0.03

    Freewill iFIS (aka SMART Trade) 20.01.01.04 allows OS Command Injection via shell metacharacters to a report page.

  • CVE-2023-41149CriSep 6, 2023
    F-RevoCRM
    F-RevoCRM
    risk 0.64cvss 9.8epss 0.01

    F-RevoCRM version7.3.7 and version7.3.8 contains an OS command injection vulnerability. If this vulnerability is exploited, an attacker who can access the product may execute an arbitrary OS command on the server where the product is running.

  • CVE-2023-40839CriAug 30, 2023
    Tenda
    AC6
    risk 0.64cvss 9.8epss 0.01

    Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin function 'sub_ADF3C' contains a command execution vulnerability. In the "formSetIptv" function, obtaining the "list" and "vlanId" fields, unfiltered passing these two fields as parameters to the "sub_ADF3C" function to execute…

  • CVE-2023-40838CriAug 30, 2023
    Tenda
    AC6
    risk 0.64cvss 9.8epss 0.01

    Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin function 'sub_3A1D0' contains a command execution vulnerability.

  • CVE-2023-40837CriAug 30, 2023
    Tenda
    AC6
    risk 0.64cvss 9.8epss 0.01

    Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin function 'sub_ADD50' contains a command execution vulnerability. In the "formSetIptv" function, obtaining the "list" and "vlanId" fields, unfiltered passing these two fields as parameters to the "sub_ADD50" function to execute…

  • CVE-2023-38027CriAug 28, 2023
    SpotCam
    SpotCam Sense
    risk 0.64cvss 9.8epss 0.02

    SpotCam Co., Ltd. SpotCam Sense’s hidden Telnet function has a vulnerability of OS command injection. An remote unauthenticated attacker can exploit this vulnerability to execute command injection attack to perform arbitrary system commands or disrupt service.

  • CVE-2023-38025CriAug 28, 2023
    SpotCam Co., Ltd.
    SpotCam FHD 2
    risk 0.64cvss 9.8epss 0.02

    SpotCam Co., Ltd. SpotCam FHD 2’s hidden Telnet function has a vulnerability of OS command injection. An remote unauthenticated attacker can exploit this vulnerability to execute command injection attack to arbitrary system commands or disrupt service.

  • CVE-2023-40069CriAug 18, 2023
    ELECOM CO.,LTD.
    WRC-1750GHBK
    risk 0.64cvss 9.8epss 0.01

    OS command injection vulnerability in ELECOM wireless LAN routers allows an attacker who can access the product to execute an arbitrary OS command by sending a specially crafted request. Affected products and versions are as follows: WRC-F1167ACF all versions, WRC-1750GHBK all…

  • CVE-2023-35893CriAug 16, 2023
    IBM
    Security Guardium
    risk 0.64cvss 9.9epss 0.01

    IBM Security Guardium 10.6, 11.3, 11.4, and 11.5 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-Force ID: 258824.

  • CVE-2023-38692CriAug 4, 2023
    cloudexplorer-dev
    cloudexplorer-lite
    risk 0.64cvss 9.8epss 0.03

    CloudExplorer Lite is an open source, lightweight cloud management platform. Versions prior to 1.3.1 contain a command injection vulnerability in the installation function in module management. The vulnerability has been fixed in v1.3.1. There are no known workarounds aside from…