cve.bz

CWE-78: Improper Neutralization of Special Elements used in an OS Command (OS Command Injection), page 118

Filter

The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command before it is sent to a downstream component.

What the weakness is: CWE-78 at MITRE

Ask an AI about CWE-78

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-78: Improper Neutralization of Special Elements used in an OS Command and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/78.html and https://cve.bz/cve/cwe/78?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 6.8CVE-2018-21110EPSS 0.9%

    NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.

  2. 6.8CVE-2018-21109EPSS 0.9%

    NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.

  3. 6.8CVE-2018-21108EPSS 0.9%

    NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.

  4. 6.8CVE-2018-21107EPSS 0.9%

    NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.

  5. 6.8CVE-2018-21106EPSS 0.9%

    NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.

  6. 6.8CVE-2018-21105EPSS 0.9%

    NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.

  7. 6.8CVE-2018-21104EPSS 0.9%

    NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.

  8. 6.8CVE-2018-21103EPSS 0.9%

    NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.

  9. 8.0CVE-2018-21101EPSS 1.0%

    NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.

  10. 6.7CVE-2020-8797EPSS 0.9%

    Juplink RX4-1500 v1.0.3 allows remote attackers to gain root access to the Linux subsystem via an unsanitized exec call (aka Command Line Injection), if the undocumented telnetd service is enabled and the attacker can authenticate as admin…

  11. 7.8CVE-2020-7350ExploitEPSS 5.0%

    Rapid7 Metasploit Framework versions before 5.0.85 suffers from an instance of CWE-78: OS Command Injection, wherein the libnotify plugin accepts untrusted user-supplied data via a remote computer's hostname or service name. An attacker ca…

  12. 8.8CVE-2018-21130EPSS 1.6%

    Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects WAC505 before 5.0.0.17 and WAC510 before 5.0.0.17.

  13. 8.8CVE-2018-21127EPSS 1.4%

    Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects WAC505 before 5.0.0.17 and WAC510 before 5.0.0.17.

  14. 8.8CVE-2018-21126EPSS 1.5%

    Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects WAC505 before 5.0.0.17 and WAC510 before 5.0.0.17.

  15. 9.8CVE-2020-11963EPSS 3.2%

    IQrouter through 3.3.1, when unconfigured, has multiple remote code execution vulnerabilities in the web-panel because of Bash Shell Metacharacter Injection. Note: The vendor claims that this vulnerability can only occur on a brand-new net…

  16. 7.2CVE-2020-5350EPSS 2.0%

    Dell EMC Integrated Data Protection Appliance versions 2.0, 2.1, 2.2, 2.3, 2.4 contain a command injection vulnerability in the ACM component. A remote authenticated malicious user with root privileges could inject parameters in the ACM co…

  17. 9.8CVE-2020-10511EPSS 2.2%

    HGiga C&Cmail CCMAILQ before olln-base-6.0-418.i386.rpm and CCMAILN before olln-base-5.0-418.i386.rpm contains insecure configurations. Attackers can exploit these flaws to access unauthorized functionality via a crafted URL.

  18. 8.8CVE-2020-9478EPSS 3.1%

    An issue was discovered in Rubrik 5.0.3-2296. An OS command injection vulnerability allows an authenticated attacker to remotely execute arbitrary code on Rubrik-managed systems.

  19. 7.2CVE-2020-6765EPSS 1.2%

    D-Link DSL-GS225 J1 AU_1.0.4 devices allow an admin to execute OS commands by placing shell metacharacters after a supported CLI command, as demonstrated by ping -c1 127.0.0.1; cat/etc/passwd. The CLI is reachable by TELNET.

  20. 8.8CVE-2020-10603EPSS 1.2%

    WebAccess/NMS (versions prior to 3.0.2) does not properly sanitize user input and may allow an attacker to inject system commands remotely.

  21. 7.8CVE-2020-7615EPSS 1.1%

    fsa through 0.5.1 is vulnerable to Command Injection. The first argument of 'execGitCommand()', located within 'lib/rep.js#63' can be controlled by users without any sanitization to inject arbitrary commands.

  22. 9.8CVE-2020-7614EPSS 3.6%

    npm-programmatic through 0.0.12 is vulnerable to Command Injection.The packages and option properties are concatenated together without any validation and are used by the 'exec' function directly.

  23. 8.1CVE-2020-7613EPSS 2.1%

    clamscan through 1.2.0 is vulnerable to Command Injection. It is possible to inject arbitrary commands as part of the `_is_clamav_binary` function located within `Index.js`. It should be noted that this vulnerability requires a pre-requisi…

  24. 8.1CVE-2020-11581EPSS 9.8%

    An issue was discovered in Pulse Secure Pulse Connect Secure (PCS) through 2020-04-06. The applet in tncc.jar, executed on macOS, Linux, and Solaris clients when a Host Checker policy is enforced, allows a man-in-the-middle attacker to per…

  25. 9.8CVE-2020-7636EPSS 4.4%

    adb-driver through 0.1.8 is vulnerable to Command Injection.It allows execution of arbitrary commands via the command function.

  26. 9.8CVE-2020-7635EPSS 4.4%

    compass-compile through 0.0.1 is vulnerable to Command Injection.It allows execution of arbitrary commands via tha options argument.

  27. 9.8CVE-2020-7634EPSS 2.8%

    heroku-addonpool through 0.1.15 is vulnerable to Command Injection.

  28. 9.8CVE-2020-7633EPSS 4.4%

    apiconnect-cli-plugins through 6.0.1 is vulnerable to Command Injection.It allows execution of arbitrary commands via the pluginUri argument.

  29. 9.8CVE-2020-7632EPSS 4.4%

    node-mpv through 1.4.3 is vulnerable to Command Injection. It allows execution of arbitrary commands via the options argument.

  30. 9.8CVE-2020-7631EPSS 3.9%

    diskusage-ng through 0.2.4 is vulnerable to Command Injection.It allows execution of arbitrary commands via the path argument.

  31. 9.8CVE-2020-7630EPSS 4.2%

    git-add-remote through 1.0.0 is vulnerable to Command Injection. It allows execution of arbitrary commands via the name argument.

  32. 9.8CVE-2020-7629EPSS 4.2%

    install-package through 0.4.0 is vulnerable to Command Injection. It allows execution of arbitrary commands via the options argument.

  33. 9.8CVE-2020-7628EPSS 1.8%

    umount through 1.1.6 is vulnerable to Command Injection. The argument device can be controlled by users without any sanitization.

  34. 9.8CVE-2020-7627EPSS 4.2%

    node-key-sender through 1.0.11 is vulnerable to Command Injection. It allows execution of arbitrary commands via the 'arrParams' argument in the 'execute()' function.

  35. 9.8CVE-2020-7626EPSS 4.3%

    karma-mojo through 1.0.1 is vulnerable to Command Injection. It allows execution of arbitrary commands via the config argument.

  36. 9.8CVE-2020-7625EPSS 4.2%

    op-browser through 1.0.6 is vulnerable to Command Injection. It allows execution of arbitrary commands via the url function.

  37. 9.8CVE-2020-7624EPSS 4.2%

    effect through 1.0.4 is vulnerable to Command Injection. It allows execution of arbitrary command via the options argument.

  38. 9.8CVE-2020-7623EPSS 3.6%

    jscover through 1.0.0 is vulnerable to Command Injection. It allows execution of arbitrary command via the source argument.

  39. 9.8CVE-2020-7621EPSS 3.0%

    strong-nginx-controller through 1.0.2 is vulnerable to Command Injection. It allows execution of arbitrary command as part of the '_nginxCmd()' function.

  40. 9.8CVE-2020-7620EPSS 2.2%

    pomelo-monitor through 0.3.7 is vulnerable to Command Injection.It allows injection of arbitrary commands as part of 'pomelo-monitor' params.

  41. 9.8CVE-2020-7619EPSS 2.2%

    get-git-data through 1.3.1 is vulnerable to Command Injection. It is possible to inject arbitrary commands as part of the arguments provided to get-git-data.

  42. 7.2CVE-2020-11490EPSS 1.9%

    Manage::Certificates in Zen Load Balancer 3.10.1 allows remote authenticated admins to execute arbitrary OS commands via shell metacharacters in the index.cgi cert_issuer, cert_division, cert_organization, cert_locality, cert_state, cert_c…

  43. 8.8CVE-2020-4242EPSS 4.6%

    IBM Spectrum Scale and IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially crafted request, an attacker could exploit this vulnerab…

  44. 8.8CVE-2020-4241EPSS 66%

    IBM Spectrum Scale and IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially crafted request, an attacker could exploit this vulnerab…

  45. 8.8CVE-2020-4206EPSS 4.6%

    IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote attacker to execute arbitrary commands on the system in the context of root user, caused by improper validation of user-supplied input. IBM X-Force ID: 174966.

  46. 9.8CVE-2019-19606EPSS 2.4%

    X-Plane before 11.41 has multiple improper path validations that could allow reading and writing files from/to arbitrary paths (or a leak of OS credentials to a remote system) via crafted network packets. This could be used to execute arbi…

  47. 9.8CVE-2020-10886EPSS 5.0%

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists…

  48. 8.8CVE-2020-10882ExploitEPSS 41%

    This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers. Authentication is not required to exploit this vulnerability. The specific f…

  49. 9.8CVE-2020-5282EPSS 1.2%

    In Nick Chan Bot before version 1.0.0-beta there is a vulnerability in the `npm` command which is part of this software package. This allows arbitrary shell execution,which can compromise the bot This is patched in version 1.0.0-beta

  50. 9.8CVE-2020-10789EPSS 2.0%

    openITCOCKPIT before 3.7.3 has a web-based terminal that allows attackers to execute arbitrary OS commands via shell metacharacters that are mishandled on an su command line in app/Lib/SudoMessageInterface.php.