cve.bz

CWE-77: Improper Neutralization of Special Elements used in a Command, page 60

Filter

The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.

What the weakness is: CWE-77 at MITRE

Ask an AI about CWE-77

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-77: Improper Neutralization of Special Elements used in a Command and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/77.html and https://cve.bz/cve/cwe/77?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.2CVE-2022-41617EPSS 1.4%

    In versions 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and 13.1.x before 13.1.5.1, When the Advanced WAF / ASM module is provisioned, an authenticated remote code execution vulnerability exists in the BIG-IP iC…

  2. 9.8CVE-2016-20017KEVExploitEPSS 66%

    D-Link DSL-2750B devices before 1.05 allow remote unauthenticated command injection via the login.cgi cli parameter, as exploited in the wild in 2016 through 2022.

  3. 8.8CVE-2022-42161EPSS 2.8%

    D-Link COVR 1200,1202,1203 v1.08 was discovered to contain a command injection vulnerability via the /SetTriggerWPS/PIN parameter at function SetTriggerWPS.

  4. 8.8CVE-2022-42160EPSS 2.7%

    D-Link COVR 1200,1202,1203 v1.08 was discovered to contain a command injection vulnerability via the system_time_timezone parameter at function SetNTPServerSettings.

  5. 8.8CVE-2022-42156EPSS 2.8%

    D-Link COVR 1200,1203 v1.08 was discovered to contain a command injection vulnerability via the tomography_ping_number parameter at function SetNetworkTomographySettings.

  6. 7.8CVE-2022-42906EPSS 0.5%

    powerline-gitstatus (aka Powerline Gitstatus) before 1.3.2 allows arbitrary code execution. git repositories can contain per-repository configuration that changes the behavior of git, including running arbitrary commands. When using powerl…

  7. 9.8CVE-2022-42897EPSS 1.6%

    Array Networks AG/vxAG with ArrayOS AG before 9.4.0.469 allows unauthenticated command injection that leads to privilege escalation and control of the system. NOTE: ArrayOS AG 10.x is unaffected.

  8. 8.2CVE-2022-34432EPSS 0.4%

    Dell Hybrid Client below 1.8 version contains a gedit vulnerability. A guest attacker could potentially exploit this vulnerability, allowing deletion of user and some system files and folders.

  9. 7.2CVE-2022-39265EPSS 3.1%

    MyBB is a free and open source forum software. The _Mail Settings_ → Additional Parameters for PHP's mail() function mail_parameters setting value, in connection with the configured mail program's options and behavior, may allow access to …

  10. 7.2CVE-2022-20851EPSS 1.1%

    A vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote attacker to perform an injection attack against an affected device. This vulnerability is due to insufficient input validation. An attacker…

  11. 7.2CVE-2022-41870EPSS 1.3%

    AP Manager in Innovaphone before 13r2 Service Release 17 allows command injection via a modified service ID during app upload.

  12. 9.8CVE-2022-39243EPSS 1.6%

    NuProcess is an external process execution implementation for Java. In all the versions of NuProcess where it forks processes by using the JVM's Java_java_lang_UNIXProcess_forkAndExec method (1.2.0+), attackers can use NUL characters in th…

  13. 9.8CVE-2022-40100EPSS 1.6%

    Tenda i9 v1.0.0.8(3828) was discovered to contain a command injection vulnerability via the FormexeCommand function.

  14. 7.2CVE-2022-37883EPSS 1.6%

    Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as…

  15. 7.2CVE-2022-37881EPSS 1.6%

    Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as…

  16. 7.2CVE-2022-37879EPSS 1.6%

    Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as…

  17. 7.5CVE-2022-28220EPSS 2.0%

    Apache James prior to release 3.6.3 and 3.7.1 is vulnerable to a buffering attack relying on the use of the STARTTLS command. Fix of CVE-2021-38542, which solved similar problem fron Apache James 3.6.1, is subject to a parser differential …

  18. 8.8CVE-2022-3008EPSS 3.1%

    The tinygltf library uses the C library function wordexp() to perform file path expansion on untrusted paths that are provided from the input file. This function allows for command injection by using backticks. An attacker could craft an u…

  19. 9.8CVE-2022-37125EPSS 3.1%

    D-link DIR-816 A2_v1.10CNB04.img is vulnerable to Command injection via /goform/NTPSyncWithHost.

  20. 8.2CVE-2022-34383EPSS 0.4%

    Dell Edge Gateway 5200 (EGW) versions before 1.03.10 contain an operating system command injection vulnerability. A local malicious user may potentially exploit this vulnerability by using an SMI to bypass PMC mitigation and gain arbitrary…

  21. 9.8CVE-2022-21941EPSS 2.1%

    All versions of iSTAR Ultra prior to version 6.8.9.CU01 are vulnerable to a command injection that could allow an unauthenticated user root access to the system.

  22. 9.8CVE-2022-36559EPSS 1.7%

    Seiko SkyBridge MB-A200 v01.00.04 and below was discovered to contain a command injection vulnerability via the Ping parameter at ping_exec.cgi.

  23. 9.8CVE-2022-36556EPSS 1.6%

    Seiko SkyBridge MB-A100/A110 v4.2.0 and below was discovered to contain a command injection vulnerability via the ipAddress parameter at 07system08execute_ping_01.

  24. 9.8CVE-2022-36554EPSS 2.4%

    A command injection vulnerability in the CLI (Command Line Interface) implementation of Hytec Inter HWL-2511-SS v1.05 and below allows attackers to execute arbitrary commands with root privileges.

  25. 9.8CVE-2022-36553ExploitEPSS 97%

    Hytec Inter HWL-2511-SS v1.05 and below was discovered to contain a command injection vulnerability via the component /www/cgi-bin/popen.cgi.

  26. 8.8CVE-2022-2234EPSS 43%

    An authenticated mySCADA myPRO 8.26.0 user may be able to modify parameters to run commands directly in the operating system.

  27. 9.8CVE-2022-36523EPSS 2.2%

    D-Link Go-RT-AC750 GORTAC750_revA_v101b03 & GO-RT-AC750_revB_FWv200b02 is vulnerable to command injection via /htdocs/upnpinc/gena.php.

  28. 5.0CVE-2022-35954EPSS 0.7%

    The GitHub Actions ToolKit provides a set of packages to make creating actions easier. The `core.exportVariable` function uses a well known delimiter that attackers can use to break out of that specific variable and assign values to other …

  29. 9.8CVE-2022-35518EPSS 1.6%

    WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 nas.cgi has no filtering on parameters: User1Passwd and User1, which leads to command injection in page /nas_disk.shtml.

  30. 8.8CVE-2022-20345EPSS 0.5%

    In l2cble_process_sig_cmd of l2c_ble.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution over Bluetooth with no additional execution privileges needed. User interaction is not…

  31. 9.8CVE-2022-34660EPSS 1.2%

    A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.15), Teamcenter V13.0 (All versions < V13.0.0.10), Teamcenter V13.1 (All versions < V13.1.0.10), Teamcenter V13.2 (All versions < V13.2.0.9), Teamcenter V13.3 …

  32. 9.8CVE-2022-34974EPSS 24%

    D-Link DIR810LA1_FW102B22 was discovered to contain a command injection vulnerability via the Ping_addr function.

  33. 9.8CVE-2020-7795EPSS 4.0%

    The package get-npm-package-version before 1.0.7 are vulnerable to Command Injection via main function in index.js.

  34. 9.8CVE-2020-28453EPSS 1.3%

    This affects all versions of package npos-tesseract. The injection point is located in line 55 in lib/ocr.js.

  35. 9.8CVE-2020-28451EPSS 1.5%

    This affects the package image-tiler before 2.0.2.

  36. 9.8CVE-2020-28437EPSS 1.3%

    This affects all versions of package heroku-env. The injection point is located in lib/get.js which is required by index.js.

  37. 9.8CVE-2020-28434EPSS 1.3%

    This affects all versions of package gitblame. The injection point is located in line 15 in lib/gitblame.js.

  38. 9.8CVE-2020-28433EPSS 0.9%

    This affects all versions of package node-latex-pdf.

  39. 9.8CVE-2020-28425EPSS 0.9%

    This affects all versions of package curljs.

  40. 9.8CVE-2020-28423EPSS 1.3%

    This affects all versions of package monorepo-build.

  41. 8.8CVE-2022-2323EPSS 6.4%

    Improper neutralization of special elements used in a user input allows an authenticated malicious user to perform remote code execution in the host system. This vulnerability impacts SonicWall Switch 1.1.1.0-2s and earlier versions

  42. 8.8CVE-2022-29558EPSS 1.3%

    Realtek rtl819x-SDK before v3.6.1 allows command injection over the web interface.

  43. 9.8CVE-2016-4991EPSS 1.8%

    Input passed to the Pdf() function is shell escaped and passed to child_process.exec() during PDF rendering. However, the shell escape does not properly encode all special characters, namely, semicolon and curly braces. This can be abused …

  44. 9.8CVE-2020-28447EPSS 1.3%

    This affects all versions of package xopen. The injection point is located in line 14 in index.js in the exported function xopen(filepath)

  45. 9.8CVE-2020-28446EPSS 3.5%

    The package ntesseract before 0.2.9 are vulnerable to Command Injection via lib/tesseract.js.

  46. 9.8CVE-2020-28445EPSS 1.5%

    This affects all versions of package npm-help. The injection point is located in line 13 in index.js file in export.latestVersion() function.

  47. 9.8CVE-2020-28443EPSS 1.3%

    This affects all versions of package sonar-wrapper. The injection point is located in lib/sonarRunner.js.

  48. 9.8CVE-2020-28438EPSS 1.3%

    This affects all versions of package deferred-exec. The injection point is located in line 42 in lib/deferred-exec.js

  49. 9.8CVE-2020-28436EPSS 1.0%

    This affects all versions of package google-cloudstorage-commands.

  50. 9.8CVE-2020-28435EPSS 1.4%

    This affects all versions of package ffmpeg-sdk. The injection point is located in line 9 in index.js.