Falhas do tipo CWE-78
4.566 resultadosInjeção de comando do sistema operacional
A aplicação constrói comandos do SO usando dados de entrada do usuário sem sanitização adequada, permitindo que um atacante injete comandos adicionais. Quando o comando é executado, instruções maliciosas do atacante rodam com os privilégios da aplicação, comprometendo o servidor.
Exemplo
Um script PHP que executa `system('ping ' . $_GET['host'])` sem validar o parâmetro. Um atacante passa `8.8.8.8; rm -rf /` e consegue deletar arquivos do servidor, não apenas fazer ping.
Como mitigar
Sempre valide e sanitize entrada de usuário; prefira APIs seguras (como funções que aceitam argumentos separados em vez de strings de comando); execute com menor privilégio necessário; use listas brancas de valores permitidos quando possível.
CVE-2023-34800CRITICALD-Link Go-RT-AC750 revA_v101b03 was discovered to contain a command injection vulnerability via the service parameter at genacgi_main.EPSS 29.3%CVE-2024-5585HIGHCommand injection via array-ish $command parameter of proc_open() (bypass CVE-2024-1874 fix)EPSS 28.8%CVE-2022-45768HIGHCommand Injection vulnerability in Edimax Technology Co., Ltd. Wireless Router N300 Firmware BR428nS v3 allows attacker to execute arbitraryEPSS 28.7%CVE-2025-5965HIGHRCE via the backup feature available only to user with high privilegeEPSS 28.6%CVE-2023-5372HIGHThe post-authentication command injection vulnerability in Zyxel NAS326 firmware versions through V5.21(AAZF.15)C0 and NAS542 firmware versiEPSS 28.5%CVE-2024-11120CRITICALGeoVision EOL devices - OS Command InjectionEPSS 28.4%KEVCVE-2019-19356HIGHNetis WF2419 is vulnerable to authenticated Remote Code Execution (RCE) as root through the router Web management page. The vulnerability haEPSS 28.2%KEVCVE-2024-10443CRITICALImproper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in Task Manager component in SynoloEPSS 28.0%CVE-2021-40410CRITICALAn OS command injection vulnerability exists in the device network settings functionality of reolink RLC-410W v3.0.0.136_20121102. At [4] thEPSS 27.9%CVE-2021-40412CRITICALAn OScommand injection vulnerability exists in the device network settings functionality of reolink RLC-410W v3.0.0.136_20121102. At [8] theEPSS 27.5%CVE-2021-30358—Mobile Access Portal Native Applications who's path is defined by the administrator with environment variables may run applications from othEPSS 27.5%CVE-2025-34117CRITICALNetcore / Netis Routers RCE via UDP Port 53413 BackdoorEPSS 27.4%CVE-2025-34036CRITICALShenzhen TVT CCTV-DVR Command InjectionEPSS 27.3%CVE-2025-54136HIGHCursor's Modification of MCP Server Definitions Bypasses Manual Re-approvalsEPSS 27.1%CVE-2024-27172CRITICALRemote Code ExecutionEPSS 26.8%CVE-2013-10059HIGHD-Link Routers tools_vct.htm OS Command InjectionEPSS 26.6%CVE-2024-32937HIGHAn os command injection vulnerability exists in the CWMP SelfDefinedTimeZone functionality of Grandstream GXP2135 1.0.9.129, 1.0.11.74 and 1EPSS 26.3%CVE-2025-27364CRITICALIn MITRE Caldera through 4.2.0 and 5.0.0 before 35bc06e, a Remote Code Execution (RCE) vulnerability was found in the dynamic agent (implantEPSS 25.9%CVE-2023-30013CRITICALTOTOLINK X5000R V9.1.0u.6118_B20201102 and V9.1.0u.6369_B20230113 contain a command insertion vulnerability in setting/setTracerouteCfg. ThiEPSS 25.9%CVE-2024-0918HIGHTRENDnet TEW-800MB POST Request os command injectionEPSS 25.4%