CWE-78

High likelihood

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Parent: CWE-77 - Improper Neutralization of Special Elements used in a Command ('Command Injection')

The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

6,017 vulnerabilities with CWE-78

CVE-2022-37056 CRITICAL

D-Link GO-RT-AC750 GORTAC750_revA_v101b03 and GO-RT-AC750_revB_FWv200b02 - OS Command Injection via cgibin hnap_main

CVSS 9.8

CVE-2022-37057 CRITICAL

D-Link Go-RT-AC750 GORTAC750_revA_v101b03 and GO-RT-AC750_revB_FWv200b02 - OS Command Injection via cgibin

CVSS 9.8

CVE-2022-31499 CRITICAL

Nortek Linear eMerge E3-Series <0.32-08f - Command Injection

CVSS 9.8

CVE-2022-20865 MEDIUM

Cisco FXOS Software - Authenticated OS Command Injection via CLI