cve.bz

CWE-15: External Control of System or Configuration Setting, page 2

Filter

One or more system settings or configuration elements can be externally controlled by a user.

What the weakness is: CWE-15 at MITRE. OWASP Top 10: A02:2025 Security Misconfiguration

Related attack patterns (CAPEC): 10
  • CAPEC-13 Subverting Environment Variable Values Likelihood: High · Severity: Very High
  • CAPEC-69 Target Programs with Elevated Privileges Likelihood: High · Severity: Very High
  • CAPEC-76 Manipulating Web Input to File System Calls Likelihood: High · Severity: Very High
  • CAPEC-77 Manipulating User-Controlled Variables Likelihood: High · Severity: Very High
  • CAPEC-146 XML Schema Poisoning Likelihood: Low · Severity: High
  • CAPEC-176 Configuration/Environment Manipulation Severity: Medium
  • CAPEC-203 Manipulate Registry Information Severity: Medium
  • CAPEC-270 Modification of Registry Run Keys Likelihood: Medium · Severity: Medium
  • CAPEC-271 Schema Poisoning Likelihood: Low · Severity: High
  • CAPEC-579 Replace Winlogon Helper DLL

The attack patterns MITRE's CAPEC relates to CWE-15, as MITRE names them. Credits.

Ask an AI about CWE-15

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-15: External Control of System or Configuration Setting and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/15.html and https://cve.bz/cve/cwe/15?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.3CVE-2025-64726EPSS 0.2%

    Socket Firewall is an HTTP/HTTPS proxy server that intercepts package manager requests and enforces security policies by blocking dangerous packages. Socket Firewall binary versions (separate from installers) prior to 0.15.5 are vulnerable…

  2. 7.1CVE-2025-62527EPSS 0.3%

    Taguette is an open source qualitative research tool. An issue has been discovered in Taguette versions prior to 1.5.0. It was possible for an attacker to request password reset email containing a malicious link, allowing the attacker to s…

  3. 2.3CVE-2025-43792EPSS 0.3%

    Remote staging in Liferay Portal 7.4.0 through 7.4.3.105, and older unsupported versions, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 35, and older unsupported versions does not p…

  4. 6.8CVE-2025-41452EPSS 0.9%

    Post-authenticated external control of system web interface configuration setting vulnerability in Danfoss AK-SM8xxA Series prior to 4.3.1, which could allow for a denial of service attack induced by improper handling of exceptional condit…

  5. 3.7CVE-2025-8283EPSS 0.4%

    A vulnerability was found in the netavark package, a network stack for containers used with Podman. Due to dns.podman search domain being removed, netavark may return external servers if a valid A/AAAA record is sent as a response. When cr…

  6. 8.8CVE-2025-27889EPSS 0.5%

    Wing FTP Server before 7.4.4 does not properly validate and sanitize the url parameter of the downloadpass.html endpoint, allowing injection of an arbitrary link. If a user clicks a crafted link, this discloses a cleartext password to the …

  7. 6.9CVE-2025-30512EPSS 0.7%

    Unauthenticated attackers can send configuration settings to device and possible perform physical actions remotely (e.g., on/off).

  8. 6.1CVE-2025-27253EPSS 0.2%

    A CWE-15 "External Control of System or Configuration Setting" in GE Vernova UR IED family devices from version 7.0 up to 8.60 allows an attacker to provide input that establishes a TCP connection through a port forwarding. The lack of the…

  9. 8.5CVE-2025-0425EPSS 0.2%

    Via the GUI of the "bestinformed Infoclient", a low-privileged user is by default able to change the server address of the "bestinformed Server" to which this client connects. This is dangerous as the "bestinformed Infoclient" runs with el…

  10. 7.1CVE-2024-11166EPSS 0.3%

    For TCAS II systems using transponders compliant with MOPS earlier than RTCA DO-181F, an attacker can impersonate a ground station and issue a Comm-A Identity Request. This action can set the Sensitivity Level Control (SLC) to the lowest s…

  11. 7.2CVE-2024-39800EPSS 1.9%

    Multiple external config control vulnerabilities exists in the openvpn.cgi openvpn_server_setup() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can…

  12. 7.2CVE-2024-39799EPSS 1.3%

    Multiple external config control vulnerabilities exists in the openvpn.cgi openvpn_server_setup() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can…

  13. 7.2CVE-2024-39798EPSS 1.9%

    Multiple external config control vulnerabilities exists in the openvpn.cgi openvpn_server_setup() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can…

  14. 7.2CVE-2024-39795EPSS 1.6%

    Multiple external config control vulnerabilities exist in the nas.cgi set_nas() proftpd functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to permission bypass. An attacker can make an authenticat…

  15. 7.2CVE-2024-39794EPSS 1.1%

    Multiple external config control vulnerabilities exist in the nas.cgi set_nas() proftpd functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to permission bypass. An attacker can make an authenticat…

  16. 7.2CVE-2024-39793EPSS 1.6%

    Multiple external config control vulnerabilities exist in the nas.cgi set_nas() proftpd functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to permission bypass. An attacker can make an authenticat…

  17. 7.2CVE-2024-39790EPSS 1.6%

    Multiple external config control vulnerabilities exist in the nas.cgi set_ftp_cfg() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to permission bypass. An attacker can make an authenticated H…

  18. 7.2CVE-2024-39789EPSS 1.1%

    Multiple external config control vulnerabilities exist in the nas.cgi set_ftp_cfg() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to permission bypass. An attacker can make an authenticated H…

  19. 7.2CVE-2024-39788EPSS 1.6%

    Multiple external config control vulnerabilities exist in the nas.cgi set_ftp_cfg() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to permission bypass. An attacker can make an authenticated H…

  20. 9.1CVE-2024-39602EPSS 2.4%

    An external config control vulnerability exists in the nas.cgi set_nas() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HT…

  21. 9.1CVE-2024-39280EPSS 35%

    An external config control vulnerability exists in the nas.cgi set_smb_cfg() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticate…

  22. 9.1CVE-2024-38666EPSS 19%

    An external config control vulnerability exists in the openvpn.cgi openvpn_client_setup() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an…

  23. 7.5CVE-2024-54097EPSS 0.3%

    Security vulnerability in the HiView module Impact: Successful exploitation of this vulnerability may affect feature implementation and integrity.

  24. 8.8CVE-2024-51544EPSS 13%

    Service Control vulnerabilities allow access to service restart requests and vm configuration settings.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

  25. 8.8CVE-2024-51543EPSS 0.3%

    Information Disclosure vulnerabilities allow access to application configuration information.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

  26. 7.2CVE-2024-50358EPSS 0.5%

    A CWE-15 "External Control of System or Configuration Setting" was discovered affecting the following devices manufactured by Advantech: EKI-6333AC-2G (<= 1.6.3), EKI-6333AC-2GD (<= v1.6.3) and EKI-6333AC-1GPO (<= v1.2.1). The vulnerabilit…

  27. 8.8CVE-2024-10979EPSS 4.4%

    Incorrect control of environment variables in PostgreSQL PL/Perl allows an unprivileged database user to change sensitive process environment variables (e.g. PATH). That often suffices to enable arbitrary code execution, even if the attac…

  28. 4.1CVE-2024-21583EPSS 0.6%

    Versions of the package github.com/gitpod-io/gitpod/components/server/go/pkg/lib before main-gha.27122; versions of the package github.com/gitpod-io/gitpod/components/ws-proxy/pkg/proxy before main-gha.27122; versions of the package github…

  29. 9.8CVE-2024-4326EPSS 1.0%

    A vulnerability in parisneo/lollms-webui versions up to 9.3 allows remote attackers to execute arbitrary code. The vulnerability stems from insufficient protection of the `/apply_settings` and `/execute_code` endpoints. Attackers can bypas…

  30. 7.8CVE-2023-6154EPSS 0.2%

    A configuration setting issue in seccenter.exe as used in Bitdefender Total Security, Bitdefender Internet Security, Bitdefender Antivirus Plus, Bitdefender Antivirus Free allows an attacker to change the product's expected behavior and po…

  31. 7.8CVE-2024-23639EPSS 0.3%

    Micronaut Framework is a modern, JVM-based, full stack Java framework designed for building modular, easily testable JVM applications with support for Java, Kotlin and the Groovy language. Enabled but unsecured management endpoints are sus…

  32. 9.8CVE-2023-50252EPSS 24%

    php-svg-lib is an SVG file parsing / rendering library. Prior to version 0.5.1, when handling `<use>` tag that references an `<image>` tag, it merges the attributes from the `<use>` tag to the `<image>` tag. The problem pops up especially …

  33. 5.3CVE-2023-46764EPSS 0.4%

    Unauthorized startup vulnerability of background apps. Successful exploitation of this vulnerability may cause background apps to start maliciously.

  34. 8.8CVE-2023-46248EPSS 1.3%

    Cody is an artificial intelligence (AI) coding assistant. The Cody AI VSCode extension versions 0.10.0 through 0.14.0 are vulnerable to Remote Code Execution under certain conditions. An attacker in control of a malicious repository could …

  35. 6.5CVE-2023-43323ExploitEPSS 2.1%

    mooSocial 3.1.8 is vulnerable to external service interaction on post function. When executed, the server sends a HTTP and DNS request to external server. The Parameters effected are multiple - messageText, data[wall_photo], data[userShare…

  36. 4.9CVE-2023-4704EPSS 0.9%

    External Control of System or Configuration Setting in GitHub repository instantsoft/icms2 prior to 2.16.1-git.

  37. 8.8CVE-2023-3321EPSS 0.4%

    A vulnerability exists by allowing low-privileged users to read and update the data in various directories used by the Zenon system. An attacker could exploit the vulnerability by using specially crafted programs to exploit the vulnerabili…

  38. 8.8CVE-2023-32349EPSS 1.1%

    Version 00.07.03.4 and prior of Teltonika’s RUT router firmware contain a packet dump utility that contains proper validation for filter parameters. However, variables for validation checks are stored in an external configuration file. An …

  39. 5.5CVE-2023-32076EPSS 0.2%

    in-toto is a framework to protect supply chain integrity. The in-toto configuration is read from various directories and allows users to configure the behavior of the framework. The files are from directories following the XDG base directo…

  40. 8.8CVE-2021-27406EPSS 1.2%

    An attacker can take leverage on PerFact OpenVPN-Client versions 1.4.1.0 and prior to send the config command from any application running on the local host machine to force the back-end server into initializing a new open-VPN instance wit…

  41. 7.5CVE-2022-41582EPSS 0.6%

    The security module has configuration defects.Successful exploitation of this vulnerability may affect system availability.

  42. 9.1CVE-2021-38453EPSS 1.1%

    Some API functions allow interaction with the registry, which includes reading values as well as data modification.

  43. 7.8CVE-2021-31338EPSS 0.2%

    A vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.0 SP1). Affected devices allow to modify configuration settings over an unauthenticated channel. This could allow a local attacker to escalate privilege…

  44. 5.5CVE-2021-3707EPSS 1.5%

    D-Link router DSL-2750U with firmware vME1.16 or prior versions is vulnerable to unauthorized configuration modification. An unauthenticated attacker on the local network may exploit this, with CVE-2021-3708, to execute any OS commands on …