Falhas do tipo CWE-78
4.563 resultadosInjeção de comando do sistema operacional
A aplicação constrói comandos do SO usando dados de entrada do usuário sem sanitização adequada, permitindo que um atacante injete comandos adicionais. Quando o comando é executado, instruções maliciosas do atacante rodam com os privilégios da aplicação, comprometendo o servidor.
Exemplo
Um script PHP que executa `system('ping ' . $_GET['host'])` sem validar o parâmetro. Um atacante passa `8.8.8.8; rm -rf /` e consegue deletar arquivos do servidor, não apenas fazer ping.
Como mitigar
Sempre valide e sanitize entrada de usuário; prefira APIs seguras (como funções que aceitam argumentos separados em vez de strings de comando); execute com menor privilégio necessário; use listas brancas de valores permitidos quando possível.
CVE-2022-31137CRITICALUnauthenticated Remote Code Execution in Roxy-WIEPSS 90.4%CVE-2023-47218MEDIUMQTS, QuTS hero, QuTScloudEPSS 89.9%CVE-2023-20273HIGHA vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote attacker to inject commands with the priEPSS 89.6%KEVCVE-2019-17621CRITICALThe UPnP endpoint URL /gena.cgi in the D-Link DIR-859 Wi-Fi router 1.05 and 1.06B01 Beta01 allows an Unauthenticated remote attacker to execEPSS 89.6%KEVCVE-2026-1731CRITICALRemote code execution vulnerability in BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA)EPSS 89.5%KEVCVE-2018-14839CRITICALLG N1A1 NAS 3718.510 is affected by: Remote Command Execution. The impact is: execute arbitrary code (remote). The attack vector is: HTTP POEPSS 89.4%KEVCVE-2024-29972CRITICAL** UNSUPPORTED WHEN ASSIGNED **
The command injection vulnerability in the CGI program "remote_help-cgi" in Zyxel NAS326 firmware versions bEPSS 89.3%CVE-2023-6895MEDIUMHikvision Intercom Broadcasting System ping.php os command injectionEPSS 89.1%CVE-2023-40504CRITICALLG Simple Editor readVideoInfo Command Injection Remote Code Execution VulnerabilityEPSS 88.7%CVE-2024-8190HIGHAn OS command injection vulnerability in Ivanti Cloud Services Appliance versions 4.6 Patch 518 and before allows a remote authenticated attEPSS 88.5%KEVCVE-2023-46359CRITICALAn OS command injection vulnerability in Hardy Barth cPH2 eCharge Ladestation v1.87.0 and earlier, may allow an unauthenticated remote attacEPSS 87.6%CVE-2019-16057CRITICALThe login_mgr.cgi script in D-Link DNS-320 through 2.05.B10 is vulnerable to remote command injection.EPSS 87.1%KEVCVE-2018-9276HIGHAn issue was discovered in PRTG Network Monitor before 18.2.39. An attacker who has access to the PRTG System Administrator web console withEPSS 87.0%KEVCVE-2024-3721MEDIUMTBK DVR-4104/DVR-4216 os command injectionEPSS 86.5%CVE-2023-34127HIGHImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in SonicWall GMS, SonicWall AnalytiEPSS 86.5%CVE-2018-6961HIGHVMware NSX SD-WAN Edge by VeloCloud prior to version 3.1.0 contains a command injection vulnerability in the local web UI component. This coEPSS 86.3%KEVCVE-2016-20016CRITICALMVPower CCTV DVR models, including TV-7104HE 1.8.4 115215B9 and TV7108HE, contain a web shell that is accessible via a /shell URI. A remote EPSS 86.2%CVE-2024-29973CRITICAL** UNSUPPORTED WHEN ASSIGNED **
The command injection vulnerability in the “setCookie” parameter in Zyxel NAS326 firmware versions before V5EPSS 86.1%CVE-2020-2038HIGHPAN-OS: OS command injection vulnerability in the management web interfaceEPSS 86.1%CVE-2023-4542MEDIUMD-Link DAR-8000-10 sys1.php os command injectionEPSS 86.0%