Falhas do tipo CWE-77

2.809 resultados

Injeção de comando

O software monta comandos do sistema ou de interpretadores (shell, SQL, etc.) usando dados que vêm de fora (entrada do usuário, requisição HTTP, arquivo) sem sanitizar ou sanitizando incorretamente caracteres especiais. Um atacante consegue 'fechar' o comando legítimo e injetar comandos arbitrários que serão executados com os mesmos privilégios da aplicação.

Exemplo

Um script que executa `ping` no endereço fornecido pelo usuário: `system('ping ' + user_input)`. Se o usuário digita `8.8.8.8; rm -rf /`, o comando executado vira dois: primeiro o ping, depois a deleção de arquivos. A maioria das CVEs de injeção de comando vêm deste padrão.

Como mitigar

Use APIs que aceitam argumentos como lista (não concatenação de strings) — ex: subprocess.run(['ping', user_input]) em Python ou parameterized queries em banco de dados. Se precisar de interpretador, valide rigorosamente a entrada com lista branca (aceita apenas IP/domínio válido) e evite shells intermediários.

CVE-2022-43109CRITICALD-Link DIR-823G v1.0.2 was found to contain a command injection vulnerability in the function SetNetworkTomographySettings. This vulnerabiliEPSS 3.7%CVE-2026-4554MEDIUMTenda F453 WriteFacMac FormWriteFacMac privilege escalationEPSS 3.7%CVE-2024-12350MEDIUMJFinalCMS Template TemplateController.java update command injectionEPSS 3.7%CVE-2025-11121MEDIUMTenda AC18 AdvSetLanip command injectionEPSS 3.7%CVE-2025-11523MEDIUMTenda AC7 AdvSetLanip command injectionEPSS 3.7%CVE-2025-9934MEDIUMTOTOLINK X5000R cstecgi.cgi sub_410C34 command injectionEPSS 3.7%CVE-2026-4204MEDIUMD-Link DNS-1550-04 gui_mgr.cgi cgi_mycloud_auto_downlaod command injectionEPSS 3.7%CVE-2023-22659HIGHAn os command injection vulnerability exists in the libzebra.so change_hostname functionality of Milesight UR32L v32.3.0.5. A specially-crafEPSS 3.7%CVE-2023-30623HIGHArbitrary command injection in embano1/wip EPSS 3.7%CVE-2024-39782CRITICALMultiple OS command injection vulnerabilities exist in the adm.cgi sch_reboot() functionality of Wavlink AC3000 M33A8.V5030.210505. A speciaEPSS 3.7%CVE-2020-10518—Unsafe configuration options in GitHub Pages leading to remote code execution on GitHub Enterprise ServerEPSS 3.7%CVE-2025-7192MEDIUMD-Link DIR-645 ssdpcgi cgibin ssdpcgi_main command injectionEPSS 3.7%CVE-2025-60672MEDIUMAn unauthenticated command injection vulnerability exists in the D-Link DIR-878A1 router firmware FW101B04.bin. The vulnerability occurs in EPSS 3.6%CVE-2024-5194MEDIUMArris VAP2500 assoc_table.php command injectionEPSS 3.6%CVE-2023-23550HIGHAn OS command injection vulnerability exists in the ys_thirdparty user_delete functionality of Milesight UR32L v32.3.0.5. A specially crafteEPSS 3.6%CVE-2023-24519HIGHTwo OS command injection vulnerability exist in the vtysh_ubus toolsh_excute.constprop.1 functionality of Milesight UR32L v32.3.0.5. A speciEPSS 3.6%CVE-2023-24520HIGHTwo OS command injection vulnerability exist in the vtysh_ubus toolsh_excute.constprop.1 functionality of Milesight UR32L v32.3.0.5. A speciEPSS 3.6%CVE-2023-22306HIGHAn OS command injection vulnerability exists in the libzebra.so bridge_group functionality of Milesight UR32L v32.3.0.5. A specially craftedEPSS 3.6%CVE-2024-22061HIGHA Heap Overflow vulnerability in WLInfoRailService component of Ivanti Avalanche before 6.4.3 allows a remote unauthenticated attacker to exEPSS 3.6%CVE-2026-4206MEDIUMD-Link DNS-1550-04 dsk_mgr.cgi ScanDisk_run_e2fsck command injectionEPSS 3.6%