Fallos del tipo CWE-78

5061 resultados

Injeção de Comando do Sistema Operacional

A aplicação constrói comandos do SO (shell, cmd.exe, etc.) usando dados de entrada do usuário ou de fontes externas sem validar ou sanitizar adequadamente. Um atacante consegue injetar metacaracteres especiais (como ;, |, &, `, $()) para executar comandos arbitrários além daqueles originalmente planejados.

Ejemplo

Uma API que executa `ping hostname` recebendo o hostname como parâmetro GET faz isso: `exec('ping ' + request.query.host)`. Um atacante passa `8.8.8.8; rm -rf /` e consegue deletar arquivos do servidor, não apenas fazer ping.

Cómo mitigar

Evite construir comandos concatenando strings com entrada externa — use bibliotecas que parametrizem comandos ou listas de argumentos (como execFile no Node.js, subprocess com lista em Python, ProcessBuilder em Java). Se for inevitável, valide contra uma whitelist rígida e, se disponível, use modo restrito do shell (sh -c com argumentos seguros) ou contenha a execução em sandbox/container.

CVE-2022-27804HIGHAn os command injection vulnerability exists in the web interface util_set_abode_code functionality of Abode Systems, Inc. iota All-In-One SEPSS 3.9%CVE-2026-101967CRITICALJunos OS Evolved: PTX Series: An attacker controlled DHCP response causes root-level compromise when zero-touch provisioning is usedEPSS 3.9%CVE-2026-101978HIGHJunos OS Evolved: PTX Series: An attacker controlled gRPC response causes root-level compromise when zero-touch provisioning is usedEPSS 3.9%CVE-2026-16492MEDIUMumijs umi GIT File Helper getFileGitIno.ts git.getFileCreateInfo os command injectionEPSS 3.9%CVE-2022-22140CRITICALAn os command injection vulnerability exists in the confsrv ucloud_add_node functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specEPSS 3.9%CVE-2019-3919—The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 is vulnerable to command injection via crafted HTTP request sent EPSS 3.9%CVE-2019-3920—The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 is vulnerable to authenticated command injection via crafted HTTPEPSS 3.9%CVE-2020-3430HIGHCisco Jabber for Windows Protocol Handler Command Injection VulnerabilityEPSS 3.9%CVE-2026-31975HIGHCloud CLI WebSocket shell injectionEPSS 3.9%CVE-2021-28571HIGHAdobe After Effects improper neutralization of special elements could lead to remote code executionEPSS 3.9%CVE-2022-29851CRITICALdocumentconverter in OX App Suite through 7.10.6, in a non-default configuration with ghostscript, allows OS Command Injection because file EPSS 3.9%CVE-2025-34024CRITICALEdimax EW-7438RPn Mini OS Command Injection via mp.aspEPSS 3.9%CVE-2026-102059HIGHJunos OS and Junos OS Evolved: EX Series, SRX Series, QFX Series: A rogue DHCP server causes root-level command execution when the phone-home client processes specific informationEPSS 3.9%CVE-2024-51228MEDIUMAn issue in TOTOLINK-CX-A3002RU V1.0.4-B20171106.1512 and TOTOLINK-CX-N150RT V2.1.6-B20171121.1002 and TOTOLINK-CX-N300RT V2.1.6-B20170724.1EPSS 3.9%CVE-2024-2854MEDIUMTenda AC18 setsambacfg formSetSambaConf os command injectionEPSS 3.9%CVE-2023-38120HIGHAdtran SR400ac ping Command Injection Remote Code Execution VulnerabilityEPSS 3.9%CVE-2021-1264CRITICALCisco DNA Center Command Runner Command Injection VulnerabilityEPSS 3.9%CVE-2021-21888CRITICALAn OS command injection vulnerability exists in the Web Manager SslGenerateCertificate functionality of Lantronix PremierWave 2050 8.9.0.0R4EPSS 3.9%CVE-2026-105740CRITICALLangflow: Authenticated RCE via MCP Stdio transport allows any user to execute arbitrary OS commands on the serverEPSS 3.9%CVE-2018-19007—In Geutebrueck GmbH E2 Camera Series versions prior to 1.12.0.25 the DDNS configuration (in the Network Configuration panel) is vulnerable tEPSS 3.9%