Fallos del tipo CWE-78

4586 resultados

Injeção de Comando do Sistema Operacional

A aplicação constrói comandos do SO (shell, cmd.exe, etc.) usando dados de entrada do usuário ou de fontes externas sem validar ou sanitizar adequadamente. Um atacante consegue injetar metacaracteres especiais (como ;, |, &, `, $()) para executar comandos arbitrários além daqueles originalmente planejados.

Ejemplo

Uma API que executa `ping hostname` recebendo o hostname como parâmetro GET faz isso: `exec('ping ' + request.query.host)`. Um atacante passa `8.8.8.8; rm -rf /` e consegue deletar arquivos do servidor, não apenas fazer ping.

Cómo mitigar

Evite construir comandos concatenando strings com entrada externa — use bibliotecas que parametrizem comandos ou listas de argumentos (como execFile no Node.js, subprocess com lista em Python, ProcessBuilder em Java). Se for inevitável, valide contra uma whitelist rígida e, se disponível, use modo restrito do shell (sh -c com argumentos seguros) ou contenha a execução em sandbox/container.

CVE-2025-15254MEDIUMTenda W6-S ATE Service ate TendaAte os command injectionEPSS 3.8%CVE-2025-11141MEDIUMRuijie NBR2100G-E branch_passw.php listAction os command injectionEPSS 3.8%CVE-2022-31249HIGH[RANCHER] OS command injection in Rancher and FleetEPSS 3.8%CVE-2022-22140CRITICALAn os command injection vulnerability exists in the confsrv ucloud_add_node functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specEPSS 3.7%CVE-2022-21178CRITICALAn os command injection vulnerability exists in the confsrv ucloud_add_new_node functionality of TCL LinkHub Mesh Wifi MS1G_00_01.00_14. A sEPSS 3.7%CVE-2024-2910MEDIUMRuijie RG-EG350 HTTP POST Request vpnAction os command injectionEPSS 3.7%CVE-2023-48842CRITICALD-Link Go-RT-AC750 revA_v101b03 was discovered to contain a command injection vulnerability via the service parameter at hedwig.cgi.EPSS 3.7%CVE-2023-4412MEDIUMTOTOLINK EX1200L setWanCfg os command injectionEPSS 3.7%CVE-2023-4410MEDIUMTOTOLINK EX1200L setDiagnosisCfg os command injectionEPSS 3.7%CVE-2022-24796CRITICALRemote Command Injection in RaspberryMaticEPSS 3.7%CVE-2018-4859—A vulnerability has been identified in SCALANCE M875 (All versions). An authenticated remote attacker with access to the web interface (443/EPSS 3.7%CVE-2018-4860—A vulnerability has been identified in SCALANCE M875 (All versions). An authenticated remote attacker with access to the web interface (443/EPSS 3.7%CVE-2022-27804HIGHAn os command injection vulnerability exists in the web interface util_set_abode_code functionality of Abode Systems, Inc. iota All-In-One SEPSS 3.7%CVE-2025-34151CRITICALShenzhen Aitemi M300 Wi-Fi Repeater PPPoE Password Command InjectionEPSS 3.7%CVE-2022-33140—Improper Neutralization of Command Elements in Shell User Group ProviderEPSS 3.7%CVE-2021-1264CRITICALCisco DNA Center Command Runner Command Injection VulnerabilityEPSS 3.7%CVE-2023-24595HIGHAn OS command injection vulnerability exists in the ys_thirdparty system_user_script functionality of Milesight UR32L v32.3.0.5. A speciallyEPSS 3.7%CVE-2022-50794CRITICALSOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Unauthenticated Command Injection via UsernameEPSS 3.7%CVE-2023-24805HIGHCommand injection in cups-filtersEPSS 3.7%CVE-2024-5421HIGHAuthenticated Command InjectionEPSS 3.7%