cve.bz

CWE-77: Improper Neutralization of Special Elements used in a Command, page 46

Filter

The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.

What the weakness is: CWE-77 at MITRE

Ask an AI about CWE-77

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-77: Improper Neutralization of Special Elements used in a Command and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/77.html and https://cve.bz/cve/cwe/77?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.8CVE-2023-33806EPSS 0.2%

    Insecure default configurations in Hikvision Interactive Tablet DS-D5B86RB/B V2.3.0 build220119, allows attackers to execute arbitrary commands.

  2. 8.8CVE-2024-30220EPSS 1.0%

    Command injection vulnerability in PLANEX COMMUNICATIONS wireless LAN routers allows a network-adjacent unauthenticated attacker to execute an arbitrary command by sending a specially crafted request to a certain port. Note that MZK-MF300N…

  3. 10.0CVE-2024-3400KEVExploitEPSS >99.9%

    A command injection as a result of arbitrary file creation vulnerability in the GlobalProtect feature of Palo Alto Networks PAN-OS software for specific PAN-OS versions and distinct feature configurations may enable an unauthenticated atta…

  4. 8.8CVE-2024-29269ExploitEPSS 6.3%

    An issue discovered in Telesquare TLR-2005Ksh 1.0.0 and 1.1.4 allows attackers to run arbitrary system commands via the Cmd parameter.

  5. 9.8CVE-2024-3566EPSS 6.8%

    A command inject vulnerability allows an attacker to perform command injection on Windows applications that indirectly depend on the CreateProcess function when the specific conditions are satisfied.

  6. 8.8CVE-2023-6999EPSS 1.3%

    The Pods – Custom Content Types and Fields plugin for WordPress is vulnerable to Remote Code Exxecution via shortcode in all versions up to, and including, 3.0.10 (with the exception of 2.7.31.2, 2.8.23.2, 2.9.19.2). This makes it possible…

  7. 7.2CVE-2024-21322EPSS 3.1%

    Microsoft Defender for IoT Remote Code Execution Vulnerability

  8. 9.8CVE-2023-49134EPSS 1.7%

    A command execution vulnerability exists in the tddpd enable_test_mode functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) v5.1.0 Build 20220926 and Tp-Link N300 Wireless Access Point (EAP115 V4) v5.0.4 Build …

  9. 9.8CVE-2023-49133EPSS 1.7%

    A command execution vulnerability exists in the tddpd enable_test_mode functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) v5.1.0 Build 20220926 and Tp-Link N300 Wireless Access Point (EAP115 V4) v5.0.4 Build …

  10. 8.0CVE-2024-31811EPSS 1.0%

    TOTOLINK EX200 V4.0.3c.7646_B20201211 was discovered to contain a remote code execution (RCE) vulnerability via the langType parameter in the setLanguageCfg function.

  11. 8.8CVE-2024-30891EPSS 1.9%

    A command injection vulnerability exists in /goform/exeCommand in Tenda AC18 v15.03.05.05, which allows attackers to construct cmdinput parameters for arbitrary command execution.

  12. 9.8CVE-2024-27981EPSS 1.3%

    A Command Injection vulnerability found in a Self-Hosted UniFi Network Servers (Linux) with UniFi Network Application (Version 8.0.28 and earlier) allows a malicious actor with UniFi Network Application Administrator credentials to escalat…

  13. 9.8CVE-2024-3116ExploitEPSS 66%

    pgAdmin <= 8.4 is affected by a Remote Code Execution (RCE) vulnerability through the validate binary path API. This vulnerability allows attackers to execute arbitrary code on the server hosting PGAdmin, posing a severe risk to the datab…

  14. 9.8CVE-2024-3273KEVExploitEPSS >99.9%Unsupported when assigned

    A vulnerability, which was classified as critical, was found in D-Link DNS-320L, DNS-325, DNS-327L and DNS-340L up to 20240403. Affected is an unknown function of the file /cgi-bin/nas_sharing.cgi of the component HTTP GET Request Handler.…

  15. 8.0CVE-2024-30572EPSS 1.5%

    Netgear R6850 1.1.0.88 was discovered to contain a command injection vulnerability via the ntp_server parameter.

  16. 7.4CVE-2024-22246EPSS 0.4%

    VMware SD-WAN Edge contains an unauthenticated command injection vulnerability potentially leading to remote code execution. A malicious actor with local access to the Edge Router UI during activation may be able to perform a command inj…

  17. 7.2CVE-2024-29949EPSS 1.3%

    There is a command injection vulnerability in some Hikvision NVRs. This could allow an authenticated user with administrative rights to execute arbitrary commands.

  18. 4.1CVE-2024-29435EPSS 0.3%

    An issue discovered in Alldata v0.4.6 allows attacker to run arbitrary commands via the processId parameter.

  19. 8.8CVE-2023-41724EPSS 13%

    A command injection vulnerability in Ivanti Sentry prior to 9.19.0 allows unauthenticated threat actor to execute arbitrary commands on the underlying operating system of the appliance within the same physical or logical network.

  20. 8.8CVE-2024-30637EPSS 1.8%

    Tenda F1202 v1.2.0.20(408) has a command injection vulnerablility in the formWriteFacMac function in the mac parameter.

  21. 7.3CVE-2024-2947EPSS 1.2%

    A flaw was found in Cockpit. Deleting a sosreport with a crafted name via the Cockpit web interface can lead to a command injection vulnerability, resulting in privilege escalation. This issue affects Cockpit versions 270 and newer.

  22. 8.8CVE-2024-25955EPSS 1.4%

    Dell vApp Manager, versions prior to 9.2.4.9 contain a Command Injection Vulnerability. An authorized attacker could potentially exploit this vulnerability leading to an execution of an inserted command. Dell recommends customers to upgrad…

  23. 8.8CVE-2024-25946EPSS 1.4%

    Dell vApp Manager, versions prior to 9.2.4.9 contain a Command Injection Vulnerability. An authorized attacker could potentially exploit this vulnerability leading to an execution of an inserted command. Dell recommends customers to upgrad…

  24. 8.8CVE-2024-3009EPSS 7.9%

    A vulnerability has been found in Tenda FH1205 2.0.0.7(775) and classified as critical. Affected by this vulnerability is the function formWriteFacMac of the file /goform/WriteFacMac. The manipulation of the argument mac leads to command i…

  25. 8.8CVE-2024-2991EPSS 7.6%

    A vulnerability has been found in Tenda FH1203 2.0.1.6 and classified as critical. This vulnerability affects the function formWriteFacMac of the file /goform/WriteFacMac. The manipulation of the argument mac leads to command injection. Th…

  26. 8.1CVE-2024-29946EPSS 0.8%

    In Splunk Enterprise versions below 9.2.1, 9.1.4, and 9.0.9, the Dashboard Examples Hub lacks protections for risky SPL commands. This could let attackers bypass SPL safeguards for risky commands in the Hub. The vulnerability would require…

  27. 8.8CVE-2024-2982EPSS 8.2%

    A vulnerability has been found in Tenda FH1202 1.2.0.14(408) and classified as critical. Affected by this vulnerability is the function formWriteFacMac of the file /goform/WriteFacMac. The manipulation of the argument mac leads to command …

  28. 8.2CVE-2024-1540EPSS 2.0%

    A command injection vulnerability exists in the deploy+test-visual.yml workflow of the gradio-app/gradio repository, due to improper neutralization of special elements used in a command. This vulnerability allows attackers to execute unaut…

  29. 9.8CVE-2024-28545EPSS 2.3%

    Tenda AC18 V15.03.05.05 contains a command injection vulnerablility in the deviceName parameter of formsetUsbUnload function.

  30. 7.8CVE-2023-52624EPSS 0.4%

    In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Wake DMCUB before executing GPINT commands [Why] DMCUB can be in idle when we attempt to interface with the HW through the GPINT mailbox resulting in a …

  31. 8.1CVE-2024-24897EPSS 1.4%

    Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in openEuler A-Tune-Collector on Linux allows Command Injection. This vulnerability is associated with program files https://gitee.Com/openeu…

  32. 8.8CVE-2024-28041EPSS 0.6%

    HGW BL1500HM Ver 002.001.013 and earlier allows a network-adjacent unauthenticated attacker to execute an arbitrary command.

  33. 9.0CVE-2024-29385EPSS 1.6%

    DIR-845L router <= v1.01KRb03 has an Unauthenticated remote code execution vulnerability in the cgibin binary via soapcgi_main function.

  34. 8.8CVE-2024-29366EPSS 2.4%

    A command injection vulnerability exists in the cgibin binary in DIR-845L router firmware <= v1.01KRb03.

  35. 9.8CVE-2024-29864EPSS 2.9%

    Distrobox before 1.7.0.1 allows attackers to execute arbitrary code via command injection into exported executables.

  36. 7.3CVE-2024-2642EPSS 2.8%

    A vulnerability was found in Ruijie RG-NBS2009G-P up to 20240305. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /EXCU_SHELL. The manipulation of the argument Command1 leads to comm…

  37. 8.4CVE-2023-41334EPSS 1.1%

    Astropy is a project for astronomy in Python that fosters interoperability between Python astronomy packages. Version 5.3.2 of the Astropy core package is vulnerable to remote code execution due to improper input validation in the `Tranfor…

  38. 10.0CVE-2024-28354EPSS 2.2%

    There is a command injection vulnerability in the TRENDnet TEW-827DRU router with firmware version 2.10B01. An attacker can inject commands into the post request parameters usapps.@smb[%d].username in the apply.cgi interface, thereby gaini…

  39. 8.8CVE-2024-28353EPSS 2.1%

    There is a command injection vulnerability in the TRENDnet TEW-827DRU router with firmware version 2.10B01. An attacker can inject commands into the post request parameters usapps.config.smb_admin_name in the apply.cgi interface, thereby g…

  40. 8.8CVE-2024-25228EPSS 26%

    Vinchin Backup and Recovery 7.2 and Earlier is vulnerable to Authenticated Remote Code Execution (RCE) via the getVerifydiyResult function in ManoeuvreHandler.class.php.

  41. 7.5CVE-2024-26204EPSS 2.1%

    Outlook for Android Information Disclosure Vulnerability

  42. 7.3CVE-2024-25998EPSS 1.5%

    An unauthenticated remote attacker can perform a command injection in the OCPP Service with limited privileges due to improper input validation.

  43. 9.1CVE-2024-22127EPSS 1.6%

    SAP NetWeaver Administrator AS Java (Administrator Log Viewer plug-in) - version 7.50, allows an attacker with high privileges to upload potentially dangerous files which leads to command injection vulnerability. This would enable the atta…

  44. 9.8CVE-2024-2352EPSS 3.0%

    A vulnerability, which was classified as critical, has been found in 1Panel up to 1.10.1-lts. Affected by this issue is the function baseApi.UpdateDeviceSwap of the file /api/v1/toolbox/device/update/swap. The manipulation of the argument …

  45. 8.0CVE-2024-25951EPSS 0.8%

    A command injection vulnerability exists in local RACADM. A malicious authenticated user could gain control of the underlying operating system.

  46. 7.8CVE-2024-23247EPSS 0.4%

    The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5. Processing a file may lead to unexpected app termination or arbitrary code execution.

  47. 7.8CVE-2024-0817EPSS 1.2%

    Command injection in IrGraph.draw in paddlepaddle/paddle 2.6.0

  48. 7.2CVE-2024-25613EPSS 1.2%

    Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operat…

  49. 7.2CVE-2024-25612EPSS 1.2%

    Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operat…

  50. 7.2CVE-2024-25611EPSS 1.2%

    Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operat…