Fallos del tipo CWE-78

4575 resultados

Injeção de Comando do Sistema Operacional

A aplicação constrói comandos do SO (shell, cmd.exe, etc.) usando dados de entrada do usuário ou de fontes externas sem validar ou sanitizar adequadamente. Um atacante consegue injetar metacaracteres especiais (como ;, |, &, `, $()) para executar comandos arbitrários além daqueles originalmente planejados.

Ejemplo

Uma API que executa `ping hostname` recebendo o hostname como parâmetro GET faz isso: `exec('ping ' + request.query.host)`. Um atacante passa `8.8.8.8; rm -rf /` e consegue deletar arquivos do servidor, não apenas fazer ping.

Cómo mitigar

Evite construir comandos concatenando strings com entrada externa — use bibliotecas que parametrizem comandos ou listas de argumentos (como execFile no Node.js, subprocess com lista em Python, ProcessBuilder em Java). Se for inevitável, valide contra uma whitelist rígida e, se disponível, use modo restrito do shell (sh -c com argumentos seguros) ou contenha a execução em sandbox/container.

CVE-2025-28219CRITICALNetgear DC112A V1.0.0.64 has an OS command injection vulnerability in the usb_adv.cgi, which allows remote attackers to execute arbitrary coEPSS 12.8%CVE-2020-6627CRITICALThe web-management application on Seagate Central NAS STCG2000300, STCG3000300, and STCG4000300 devices allows OS command injection via mv_bEPSS 12.8%CVE-2026-2670HIGHAdvantech WISE-6610-NB Background Management openvpn_apply os command injectionEPSS 12.8%CVE-2025-7414MEDIUMTenda O3V2 httpd setPingInfo fromNetToolGet os command injectionEPSS 12.6%CVE-2025-34035CRITICALEnGenius EnShare IoT Gigabit Cloud Service Command InjectionEPSS 12.5%CVE-2024-44333HIGHD-Link DI-7003GV2 v24.04.18D1, DI-7100G+V2 v24.04.18D1, DI-7100GV2 v24.04.18D1, DI-7200GV2 v24.04.18E1, DI-7300G+V2 v24.04.18D1, and DI-7400EPSS 12.4%CVE-2026-26046HIGHMoodle: moodle: improper input sanitization in tex filter administration settingEPSS 12.3%CVE-2025-53679MEDIUMAn improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] vulnerability in FortinEPSS 12.3%CVE-2023-3608MEDIUMRuijie BCR810W Tracert Page os command injectionEPSS 12.3%CVE-2022-1703—Improper neutralization of special elements in the SonicWall SSL-VPN SMA100 series management interface allows a remote authenticated attackEPSS 12.3%CVE-2025-1829MEDIUMTOTOLINK X18 cstecgi.cgi setMtknatCfg os command injectionEPSS 12.1%CVE-2017-20216CRITICALFLIR Thermal Camera PT-Series firmware version 8.0.0.64 Unauthenticated Remote Command InjectionEPSS 12.0%CVE-2026-40933CRITICALFlowise: Authenticated RCE Via MCP AdaptersEPSS 12.0%CVE-2021-33990CRITICALLiferay Portal 6.2.5 allows Command=FileUpload&Type=File&CurrentFolder=/ requests when frmfolders.html exists. NOTE: The vendor disputes thiEPSS 11.9%CVE-2013-10069CRITICALD-Link Devices Unauthenticated RCEEPSS 11.9%CVE-2025-10441MEDIUMD-Link DI-8100G/DI-8200G/DI-8003G jhttpd version_upgrade.asp sub_433F7C os command injectionEPSS 11.8%CVE-2025-10440MEDIUMD-Link DI-8100/DI-8100G/DI-8200/DI-8200G/DI-8003/DI-8003G jhttpd usb_paswd.asp sub_4621DC os command injectionEPSS 11.8%CVE-2023-27826HIGHSeowonIntech SWC 5100W WIMAX Bootloader 1.18.19.0, HW 0.0.7.0, and FW 1.11.0.1, 1.9.9.4 are vulnerable to OS Command Injection. which allowsEPSS 11.8%CVE-2024-46628HIGHTenda G3 Router firmware v15.03.05.05 was discovered to contain a remote code execution (RCE) vulnerability via the usbPartitionName parametEPSS 11.7%CVE-2021-20026—A vulnerability in the SonicWall NSM On-Prem product allows an authenticated attacker to perform OS command injection using a crafted HTTP rEPSS 11.6%