Falhas do tipo CWE-77

2.811 resultados

Injeção de comando

O software monta comandos do sistema ou de interpretadores (shell, SQL, etc.) usando dados que vêm de fora (entrada do usuário, requisição HTTP, arquivo) sem sanitizar ou sanitizando incorretamente caracteres especiais. Um atacante consegue 'fechar' o comando legítimo e injetar comandos arbitrários que serão executados com os mesmos privilégios da aplicação.

Exemplo

Um script que executa `ping` no endereço fornecido pelo usuário: `system('ping ' + user_input)`. Se o usuário digita `8.8.8.8; rm -rf /`, o comando executado vira dois: primeiro o ping, depois a deleção de arquivos. A maioria das CVEs de injeção de comando vêm deste padrão.

Como mitigar

Use APIs que aceitam argumentos como lista (não concatenação de strings) — ex: subprocess.run(['ping', user_input]) em Python ou parameterized queries em banco de dados. Se precisar de interpretador, valide rigorosamente a entrada com lista branca (aceita apenas IP/domínio válido) e evite shells intermediários.

CVE-2024-20676HIGHAzure Storage Mover Remote Code Execution VulnerabilityEPSS 2.6%CVE-2025-6897MEDIUMD-Link DI-7300G+ httpd_debug.asp os command injectionEPSS 2.6%CVE-2025-22939CRITICALA command injection vulnerability in the telnet service of Adtran 411 ONT L80.00.0011.M2 allows attackers to escalate privileges to root andEPSS 2.6%CVE-2026-36741HIGHU-SPEED AC1200 Gigabit Wi-Fi Router (Model: T18-21K) V1.0 is vulnerable to Command Injection. The Network Time Protocol (NTP) configuration EPSS 2.6%CVE-2026-38835CRITICALTenda W30E V2.0 V16.01.0.21 was found to contain a command injection vulnerability in the formSetUSBPartitionUmount function via the usbPartEPSS 2.6%CVE-2026-7687MEDIUMlangflow-ai langflow Full Builtins code_parser.py CodeParser.parse_callable_details command injectionEPSS 2.6%CVE-2026-9347MEDIUMEdimax EW-7438RPn webs formWizSurvey os command injectionEPSS 2.6%CVE-2020-4059HIGHCommand Injection in mversionEPSS 2.6%CVE-2024-7897MEDIUMTosei Online Store Management System ネット店舗管理システム tosei_kikai.php command injectionEPSS 2.6%CVE-2020-3212HIGHCisco IOS XE Software Web UI Command Injection VulnerabilityEPSS 2.6%CVE-2020-25847HIGHCommand Injection Vulnerability in QTS and QuTS heroEPSS 2.6%CVE-2025-5139MEDIUMQualitor Office 365-type Connection testaConexaoOffice365.php command injectionEPSS 2.6%CVE-2025-1339MEDIUMTOTOLINK X18 cstecgi.cgi setL2tpdConfig os command injectionEPSS 2.6%CVE-2022-32262HIGHA vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The affected application contains a file upload sEPSS 2.6%CVE-2022-25923HIGHVersions of the package exec-local-bin before 1.2.0 are vulnerable to Command Injection via the theProcess() functionality due to improper uEPSS 2.6%CVE-2025-15081MEDIUMJD Cloud BE6500 jdcapi sub_4780 command injectionEPSS 2.5%CVE-2025-5492MEDIUMD-Link DI-500WF-WT /usr/sbin/jhttpd msp_info.htm sub_456DE8 command injectionEPSS 2.5%CVE-2019-12651HIGHCisco IOS XE Software Web UI Command Injection VulnerabilitiesEPSS 2.5%CVE-2022-40619HIGHFunJSQ, a third-party module integrated on some NETGEAR routers and Orbi WiFi Systems, exposes an HTTP server over the LAN interface of affeEPSS 2.5%CVE-2025-60702MEDIUMA command injection vulnerability exists in the TOTOLINK A950RG Router firmware V5.9c.4592_B20191022_ALL within the `system.so` binary. The EPSS 2.5%