Falhas do tipo CWE-77

2.807 resultados

Injeção de comando

O software monta comandos do sistema ou de interpretadores (shell, SQL, etc.) usando dados que vêm de fora (entrada do usuário, requisição HTTP, arquivo) sem sanitizar ou sanitizando incorretamente caracteres especiais. Um atacante consegue 'fechar' o comando legítimo e injetar comandos arbitrários que serão executados com os mesmos privilégios da aplicação.

Exemplo

Um script que executa `ping` no endereço fornecido pelo usuário: `system('ping ' + user_input)`. Se o usuário digita `8.8.8.8; rm -rf /`, o comando executado vira dois: primeiro o ping, depois a deleção de arquivos. A maioria das CVEs de injeção de comando vêm deste padrão.

Como mitigar

Use APIs que aceitam argumentos como lista (não concatenação de strings) — ex: subprocess.run(['ping', user_input]) em Python ou parameterized queries em banco de dados. Se precisar de interpretador, valide rigorosamente a entrada com lista branca (aceita apenas IP/domínio válido) e evite shells intermediários.

CVE-2025-14705CRITICALShiguangwu sgwbox N3 SHARESERVER Feature command injectionEPSS 16.5%CVE-2022-0902HIGHABB Flow Computer and Remote Controllers Path Traversal Vulnerability in Totalflow TCP protocol can lead to root accessEPSS 16.5%CVE-1999-0039HIGHwebdist CGI program (webdist.cgi) in SGI IRIX allows remote attackers to execute arbitrary commands via shell metacharacters in the distloc EPSS 16.2%CVE-2023-33532CRITICALThere is a command injection vulnerability in the Netgear R6250 router with Firmware Version 1.0.4.48. If an attacker gains web management pEPSS 16.2%CVE-2026-2824MEDIUMComfast CF-E7 webmggnt mbox-config sub_441CF4 command injectionEPSS 15.9%CVE-2024-34166CRITICALAn os command injection vulnerability exists in the touchlist_sync.cgi touchlistsync() functionality of Wavlink AC3000 M33A8.V5030.210505. AEPSS 15.8%CVE-2026-1125MEDIUMD-Link DIR-823X set_wifidog_settings sub_412E7C command injectionEPSS 15.7%CVE-2026-1419MEDIUMD-Link DCS700l Web Form setDayNightMode command injectionEPSS 15.7%CVE-2026-2131MEDIUMXixianLiang HarmonyOS-mcp-server input_text os command injectionEPSS 15.6%CVE-2017-6048—A Command Injection issue was discovered in Satel Iberia SenNet Data Logger and Electricity Meters: SenNet Optimal DataLogger V5.37c-1.43c aEPSS 15.5%CVE-2026-3517HIGHOS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAFEPSS 15.5%CVE-2026-3798MEDIUMComfast CF-AC100 Request Path mbox-config sub_44AC14 command injectionEPSS 15.5%CVE-2024-10193MEDIUMWAVLINK WN530H4/WN530HG4/WN572HG3 internet.cgi ping_ddns command injectionEPSS 15.5%CVE-2024-42905CRITICALBeijing Digital China Cloud Technology Co., Ltd. DCME-320 v.7.4.12.60 has a command execution vulnerability, which can be exploited to obtaiEPSS 15.4%CVE-2026-5850CRITICALTotolink A7100RU CGI cstecgi.cgi setVpnPassCfg os command injectionEPSS 15.1%CVE-2024-35397HIGHTOTOLINK CP900L v4.1.5cu.798_B20221228 weas discovered to contain a command injection vulnerability in the NTPSyncWithHost function via the EPSS 15.1%CVE-2025-4357MEDIUMTenda RX3 telnet command injectionEPSS 15.0%CVE-2025-5446MEDIUMLinksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 RP_checkCredentialsByBBS os command injectionEPSS 15.0%CVE-2025-5442MEDIUMLinksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 RP_pingGatewayByBBS os command injectionEPSS 15.0%CVE-2025-5441MEDIUMLinksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 setDeviceURL os command injectionEPSS 15.0%