Falhas do tipo CWE-77

2.810 resultados

Injeção de comando

O software monta comandos do sistema ou de interpretadores (shell, SQL, etc.) usando dados que vêm de fora (entrada do usuário, requisição HTTP, arquivo) sem sanitizar ou sanitizando incorretamente caracteres especiais. Um atacante consegue 'fechar' o comando legítimo e injetar comandos arbitrários que serão executados com os mesmos privilégios da aplicação.

Exemplo

Um script que executa `ping` no endereço fornecido pelo usuário: `system('ping ' + user_input)`. Se o usuário digita `8.8.8.8; rm -rf /`, o comando executado vira dois: primeiro o ping, depois a deleção de arquivos. A maioria das CVEs de injeção de comando vêm deste padrão.

Como mitigar

Use APIs que aceitam argumentos como lista (não concatenação de strings) — ex: subprocess.run(['ping', user_input]) em Python ou parameterized queries em banco de dados. Se precisar de interpretador, valide rigorosamente a entrada com lista branca (aceita apenas IP/domínio válido) e evite shells intermediários.

CVE-2011-4182HIGHshell code injection via ESSID because of missing escaping of a variableEPSS 1.8%CVE-2026-47670CRITICALDbGate Vulnerable to Authenticated Remote Code Execution via loadReader functionName code injectionEPSS 1.8%CVE-2025-8697MEDIUMagentUniverse MCPSessionManager/MCPTool/MCPToolkit StdioServerParameters os command injectionEPSS 1.8%CVE-2025-8667MEDIUMSkyworkAI DeepResearchAgent tools.py from_mcp os command injectionEPSS 1.8%CVE-2025-8665MEDIUMagno-agi agno Model Context Protocol mcp.py MultiMCPTools os command injectionEPSS 1.8%CVE-2022-4934HIGHA post-auth command injection vulnerability in the exception wizard of Sophos Web Appliance older than version 4.3.10.4 allows administratorEPSS 1.8%CVE-2024-22663CRITICALTOTOLINK_A3700R_V9.1.2u.6165_20211012has a command Injection vulnerability via setOpModeCfgEPSS 1.7%CVE-2023-22748CRITICALMultiple Unauthenticated Command Injections in the PAPI ProtocolEPSS 1.7%CVE-2023-22749CRITICALMultiple Unauthenticated Command Injections in the PAPI ProtocolEPSS 1.7%CVE-2023-22750CRITICALMultiple Unauthenticated Command Injections in the PAPI ProtocolEPSS 1.7%CVE-2023-22747CRITICALMultiple Unauthenticated Command Injections in the PAPI ProtocolEPSS 1.7%CVE-2025-29519MEDIUMA command injection vulnerability in the EXE parameter of D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 allows attackers to execEPSS 1.7%CVE-2019-3913—Command manipulation in LabKey Server Community Edition before 18.3.0-61806.763 allows an authenticated remote attacker to unmount any driveEPSS 1.7%CVE-2024-32292HIGHTenda W30E v1.0 V1.0.1.25(633) firmware contains a command injection vulnerablility in the formexeCommand function via the cmdinput parameteEPSS 1.7%CVE-2024-47461HIGHAuthenticated Arbitrary Remote Command Execution (RCE) in Instant AOS-8 and AOS-10EPSS 1.7%CVE-2024-22529CRITICALTOTOLINK X2000R_V2 V2.0.0-B20230727.10434 has a command injection vulnerability in the sub_449040 (handle function of formUploadFile) of /biEPSS 1.7%CVE-2023-33722HIGHEDIMAX BR-6288ACL v1.12 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the pppUserName parameter.EPSS 1.7%CVE-2024-51115CRITICALDCME-320 v7.4.12.90 was discovered to contain a command injection vulnerability.EPSS 1.7%CVE-2019-15595—A privilege escalation exists in UniFi Video Controller =<3.10.6 that would allow an attacker on the local machine to run arbitrary commandsEPSS 1.7%CVE-2024-8156HIGHCommand Injection in significant-gravitas/autogptEPSS 1.7%