CWE-77: Improper Neutralization of Special Elements used in a Command, page 77

The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.

What the weakness is: CWE-77 at MITRE

1. 6.7CVE-2017-12352EPSS 0.4%2017-11-30

   A vulnerability in certain system script files that are installed at boot time on Cisco Application Policy Infrastructure Controllers could allow an authenticated, local attacker to gain elevated privileges and execute arbitrary commands w…

2. 6.7CVE-2017-12341EPSS 0.7%2017-11-30

   A vulnerability in the CLI of Cisco NX-OS System Software could allow an authenticated, local attacker to perform a command injection attack. An attacker would need valid administrator credentials to perform this exploit. The vulnerability…

3. 5.7CVE-2017-12339EPSS 0.7%2017-11-30

   A vulnerability in the CLI of Cisco NX-OS System Software could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to insufficient input validation of command arguments to the CLI parser.…

4. 6.3CVE-2017-12335EPSS 0.9%2017-11-30

   A vulnerability in the CLI of Cisco NX-OS System Software could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to insufficient input validation of command arguments. An attacker could…

5. 6.3CVE-2017-12330EPSS 1.1%2017-11-30

   A vulnerability in the CLI of Cisco NX-OS System Software could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to insufficient input validation of command arguments to the CLI parser.…

6. 6.3CVE-2017-12329EPSS 1.1%2017-11-30

   A vulnerability in the CLI of Cisco Firepower Extensible Operating System (FXOS) and NX-OS System Software could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to insufficient input v…

7. 7.2CVE-2017-8197EPSS 2.0%2017-11-22

   FusionSphere V100R006C00SPC102(NFV) has a command injection vulnerability. An authenticated, remote attacker could craft packets with malicious strings and send them to a target device. Successful exploit could allow the attacker to launch…

8. 8.0CVE-2017-8193EPSS 0.9%2017-11-22

   The FusionSphere OpenStack V100R006C00SPC102(NFV) has a command injection vulnerability. Due to the insufficient input validation on one port, an authenticated, local attacker may exploit the vulnerability to gain root privileges by sendin…

9. 7.2CVE-2017-8188EPSS 1.7%2017-11-22

   FusionSphere OpenStack V100R006C00SPC102(NFV)has a command injection vulnerability. Due to lack of validation, an attacker with high privilege may inject malicious code into some module of the affected products, causing code execution.

10. 8.8CVE-2017-8135EPSS 1.4%2017-11-22

    The FusionSphere OpenStack with software V100R006C00 and V100R006C10 has a command injection vulnerability due to the insufficient input validation on four TCP listening ports. An unauthenticated attacker can exploit the vulnerabilities to…

11. 8.8CVE-2017-8134EPSS 1.4%2017-11-22

    The FusionSphere OpenStack with software V100R006C00 and V100R006C10 has a command injection vulnerability due to the insufficient input validation on four TCP listening ports. An unauthenticated attacker can exploit the vulnerabilities to…

12. 8.8CVE-2017-8133EPSS 1.5%2017-11-22

    Huawei iManager NetEco with software V600R008C00 and V600R008C10 has a command injection vulnerability. An authenticated, remote attacker could exploit this vulnerability to send malicious packets to a target device. Successful exploit cou…

13. 8.8CVE-2017-8132EPSS 1.4%2017-11-22

    The FusionSphere OpenStack with software V100R006C00 and V100R006C10 has a command injection vulnerability due to the insufficient input validation on four TCP listening ports. An unauthenticated attacker can exploit the vulnerabilities to…

14. 8.8CVE-2017-8131EPSS 1.4%2017-11-22

    The FusionSphere OpenStack with software V100R006C00 and V100R006C10 has a command injection vulnerability due to the insufficient input validation on four TCP listening ports. An unauthenticated attacker can exploit the vulnerabilities to…

15. 7.2CVE-2017-2736EPSS 1.4%2017-11-22

    VCM5010 with software versions earlier before V100R002C50SPC100 has a command injection vulnerability. This is due to insufficient validation of user's input. An authenticated attacker could launch a command injection attack.

16. 8.8CVE-2017-2719EPSS 0.9%2017-11-22

    FusionSphere OpenStack with software V100R006C00 and V100R006C10RC2 has two command injection vulnerabilities due to the insufficient input validation on one port. An attacker can exploit the vulnerabilities to gain root privileges by send…

17. 8.8CVE-2017-2718EPSS 0.9%2017-11-22

    FusionSphere OpenStack with software V100R006C00 and V100R006C10RC2 has two command injection vulnerabilities due to the insufficient input validation on one port. An attacker can exploit the vulnerabilities to gain root privileges by send…

18. 7.8CVE-2017-2692EPSS 1.0%2017-11-22

    The Keyguard application in ALE-L02C635B140 and earlier versions,ALE-L02C636B140 and earlier versions,ALE-L21C10B150 and earlier versions,ALE-L21C185B200 and earlier versions,ALE-L21C432B214 and earlier versions,ALE-L21C464B150 and earlier…

19. 9.8CVE-2017-13071EPSS 1.4%2017-11-22

    QNAP has already patched this vulnerability. This security concern allows a remote attacker to run arbitrary commands on the QNAP Video Station 5.1.3 (for QTS 4.3.3), 5.2.0 (for QTS 4.3.4), and earlier.

20. 6.7CVE-2017-12305EPSS 0.8%2017-11-16

    A vulnerability in the debug interface of Cisco IP Phone 8800 series could allow an authenticated, local attacker to execute arbitrary commands, aka Debug Shell Command Injection. The vulnerability is due to insufficient input validation. …

21. 9.8CVE-2008-7319EPSS 6.5%2017-11-07

    The Net::Ping::External extension through 0.15 for Perl does not properly sanitize arguments (e.g., invalid hostnames) containing shell metacharacters before use of backticks in External.pm, allowing for shell command injection and arbitra…

22. 6.5CVE-2017-12094EPSS 0.9%2017-11-07

    An exploitable vulnerability exists in the WiFi Channel parsing of Circle with Disney running firmware 2.0.1. A specially crafted SSID can cause the device to execute arbitrary sed commands. An attacker needs to setup an access point reach…

23. 8.8CVE-2017-12277EPSS 3.8%2017-11-02

    A vulnerability in the Smart Licensing Manager service of the Cisco Firepower 4100 Series Next-Generation Firewall (NGFW) and Firepower 9300 Security Appliance could allow an authenticated, remote attacker to inject arbitrary commands that…

24. 9.8CVE-2014-1203ExploitEPSS 16%2017-10-24

    The get_login_ip_config_file function in Eyou Mail System before 3.6 allows remote attackers to execute arbitrary commands via shell metacharacters in the domain parameter to admin/domain/ip_login_set/d_ip_login_get.php.

25. 9.8CVE-2014-3741EPSS 3.8%2017-10-23

    The printDirect function in lib/printer.js in the node-printer module 0.0.1 and earlier for Node.js allows remote attackers to execute arbitrary commands via unspecified characters in the lpr command.

26. 8.1CVE-2013-7377EPSS 2.0%2017-10-23

    The codem-transcode module before 0.5.0 for Node.js, when ffprobe is enabled, allows remote attackers to execute arbitrary commands via a POST request to /probe.

27. 9.8CVE-2015-7806EPSS 6.0%2017-10-17

    Eval injection vulnerability in the fm_saveHelperGatherItems function in ajax.php in the Form Manager plugin before 1.7.3 for WordPress allows remote attackers to execute arbitrary code via unspecified vectors.

28. 8.8CVE-2014-9118ExploitEPSS 53%2017-10-17

    The web administrative portal in Zhone zNID GPON 2426A before S3.0.501 allows remote attackers to execute arbitrary commands via shell metacharacters in the ipAddr parameter to zhnping.cmd.

29. 7.8CVE-2016-4922EPSS 0.5%2017-10-13

    Certain combinations of Junos OS CLI commands and arguments have been found to be exploitable in a way that can allow unauthorized access to the operating system. This may allow any user with permissions to run these CLI commands the abili…

30. 9.8CVE-2013-6924ExploitEPSS 15%2017-10-11

    Seagate BlackArmor NAS devices with firmware sg2000-2000.1331 allow remote attackers to execute arbitrary commands via shell metacharacters in the ip parameter to backupmgt/getAlias.php.

31. 9.8CVE-2008-7315EPSS 3.4%2017-10-10

    UI-Dialog 1.09 and earlier allows remote attackers to execute arbitrary commands.

32. 9.8CVE-2017-13069EPSS 1.7%2017-10-06

    QNAP discovered a number of command injection vulnerabilities found in Music Station versions 4.8.6 (for QTS 4.2.x), 5.0.7 (for QTS 4.3.x), and earlier. If exploited, these vulnerabilities may allow a remote attacker to run arbitrary comma…

33. 9.8CVE-2015-7841EPSS 2.1%2017-10-03

    The login page of the server on Huawei FusionServer rack servers RH2288 V3 with software before V100R003C00SPC603, RH2288H V3 with software before V100R003C00SPC503, XH628 V3 with software before V100R003C00SPC602, RH1288 V3 with software …

34. 7.8CVE-2015-6971EPSS 0.5%2017-10-03

    Lenovo System Update (formerly ThinkVantage System Update) before 5.07.0013 allows local users to submit commands to the System Update service (SUService.exe) and gain privileges by launching signed Lenovo executables.

35. 8.8CVE-2017-1407EPSS 3.4%2017-09-28

    IBM Security Identity Manager Virtual Appliance 6.0 and 7.0 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-crafted request, an attacker could exploit this vulnerability to ex…

36. 7.8CVE-2015-5704EPSS 0.5%2017-09-25

    scripts/licensecheck.pl in devscripts before 2.15.7 allows local users to execute arbitrary shell commands.

37. 8.8CVE-2017-14081EPSS 17%2017-09-22

    Proxy command injection vulnerabilities in Trend Micro Mobile Security (Enterprise) versions before 9.7 Patch 3 allow remote attackers to execute arbitrary code on vulnerable installations.

38. 5.5CVE-2017-1352EPSS 0.8%2017-09-12

    IBM Maximo Asset Management 7.5 and 7.6 could allow an authenticated user to inject commands into work orders that could be executed by another user that downloads the affected file. IBM X-Force ID: 126538.

39. 6.7CVE-2017-6794EPSS 0.8%2017-09-07

    A vulnerability in the CLI command-parsing code of Cisco Meeting Server could allow an authenticated, local attacker to perform command injection and escalate their privileges to root. The attacker must first authenticate to the applicatio…

40. 7.8CVE-2015-2210EPSS 0.6%2017-09-06

    The help window in Epicor CRS Retail Store before 3.2.03.01.008 allows local users to execute arbitrary code by injecting Javascript into the window source to create a button that spawns a command shell.

41. 9.8CVE-2015-2857ExploitEPSS 84%2017-08-22

    Accellion File Transfer Appliance before FTA_9_11_210 allows remote attackers to execute arbitrary code via shell metacharacters in the oauth_token parameter.

42. 8.8CVE-2017-6327KEVExploitEPSS 36%2017-08-11

    The Symantec Messaging Gateway before 10.6.3-267 can encounter an issue of remote code execution, which describes a situation whereby an individual may obtain the ability to execute commands remotely on a target machine or in a target proc…

43. 7.2CVE-2017-12756EPSS 1.2%2017-08-09

    Command inject in transfer from another server in extplorer 2.1.9 and prior allows attacker to inject command via the userfile[0] parameter.

44. 8.8CVE-2017-11392ExploitEPSS 34%2017-08-03

    Proxy command injection vulnerability in Trend Micro InterScan Messaging Virtual Appliance 9.0 and 9.1 allows remote attackers to execute arbitrary code on vulnerable installations. The specific flaw can be exploited by parsing the "T" par…

45. 8.8CVE-2017-11391ExploitEPSS 62%2017-08-03

    Proxy command injection vulnerability in Trend Micro InterScan Messaging Virtual Appliance 9.0 and 9.1 allows remote attackers to execute arbitrary code on vulnerable installations. The specific flaw can be exploited by parsing the "t" par…

46. 8.8CVE-2014-8903EPSS 2.2%2017-08-02

    IBM Curam Social Program Management 6.0 SP2 before EP26, 6.0.4 before 6.0.4.5iFix10 and 6.0.5 before 6.0.5.6 allows remote authenticated users to load arbitrary Java classes via unspecified vectors.

47. 9.8CVE-2017-9980EPSS 3.0%2017-07-21

    In Green Packet DX-350 Firmware version v2.8.9.5-g1.4.8-atheeb, the "PING" (aka tag_ipPing) feature within the web interface allows performing command injection, via the "pip" parameter.

48. 9.8CVE-2017-7977EPSS 2.4%2017-07-19

    The Screensavercc component in eLux RP before 5.5.0 allows attackers to bypass intended configuration restrictions and execute arbitrary commands with root privileges by inserting commands in a local configuration dialog in the control pan…

49. 8.8CVE-2017-2349EPSS 2.3%2017-07-17

    A command injection vulnerability in the IDP feature of Juniper Networks Junos OS on SRX series devices potentially allows a user with login access to the device to execute shell commands and elevate privileges. Affected releases are Junip…

50. 8.8CVE-2017-4054EPSS 2.6%2017-07-12

    Command Injection vulnerability in the web interface in McAfee Advanced Threat Defense (ATD) 3.10, 3.8, 3.6, 3.4 allows remote authenticated users to execute a command of their choice via a crafted HTTP request parameter.