目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1336 元

100%
请我们喝杯咖啡

CWE-77 在命令中使用的特殊元素转义处理不恰当(命令注入) 类漏洞列表 1387

CWE-77 在命令中使用的特殊元素转义处理不恰当(命令注入) 类弱点 1387 条 CVE 漏洞汇总，含 AI 中文分析。

CWE-77即命令注入，属于输入验证缺陷。攻击者通过构造包含特殊字符的恶意输入，篡改后端系统命令，从而执行任意指令或获取敏感数据。开发者应避免直接拼接用户输入，需采用白名单过滤、参数化调用或安全API替代系统命令执行，确保输入被严格限制在预期范围内，从源头阻断注入风险。

MITRE CWE 官方描述
CWE：CWE-77 命令注入（Command Injection）中特殊元素的不当中和 英文：产品使用来自上游组件的外部影响输入来构造命令的全部或部分内容，但在将命令发送给下游组件时，未对可能修改预期命令的特殊元素进行中和，或中和不当。 许多协议和产品拥有其自定义的命令语言。尽管操作系统（OS）或 Shell 命令字符串常被发现并作为攻击目标，但开发人员可能未意识到这些其他命令语言也可能易受攻击。
常见影响 (1)
Integrity, Confidentiality, Availability Execute Unauthorized Code or Commands
If a malicious user injects a character (such as a semi-colon) that delimits the end of one command and the beginning of another, it may be possible to then insert an entirely new and unrelated command that was not intended to be executed. This gives an attacker a privilege or capability that they w…
缓解措施 (5)
Architecture and Design If at all possible, use library calls rather than external processes to recreate the desired functionality.
Implementation If possible, ensure that all external commands called from the program are statically created.
Implementation Assume all input is malicious. Use an "accept known good" input validation strategy, i.e., use a list of acceptable inputs that strictly conform to specifications. Reject any input that does not strictly conform to specifications, or transform it into something that does. When performing input validation, consider all potentially relevant properties, including length, type of input, the full range…
Operation Run time: Run time policy enforcement may be used in an allowlist fashion to prevent use of any non-sanctioned commands.
System Configuration Assign permissions that prevent the user from accessing/opening privileged files.
代码示例 (2)
Consider a "CWE Differentiator" application that uses an an LLM generative AI based "chatbot" to explain the difference between two weaknesses. As input, it accepts two CWE IDs, constructs a prompt string, sends the prompt to the chatbot, and prints the results. The prompt string effectively acts as a command to the chatbot component. Assume that invokeChatbot() calls the chatbot and returns the …
prompt = "Explain the difference between {} and {}".format(arg1, arg2) result = invokeChatbot(prompt) resultHTML = encodeForHTML(result) print resultHTML
Bad · Python
Explain the difference between CWE-77 and CWE-78
Informative
Consider the following program. It intends to perform an "ls -l" on an input filename. The validate_name() subroutine performs validation on the input to make sure that only alphanumeric and "-" characters are allowed, which avoids path traversal (CWE-22) and OS command injection (CWE-78) weaknesses. Only filenames like "abc" or "d-e-f" are intended to be allowed.
my $arg = GetArgument("filename"); do_listing($arg); sub do_listing { my($fname) = @_; if (! validate_name($fname)) { print "Error: name is not well-formed!\n"; return; } # build command my $cmd = "/bin/ls -l $fname"; system($cmd); } sub validate_name { my($name) = @_; if ($name =~ /^[\w\-]+$/) { return(1); } else { return(0); } }
Bad · Perl
if ($name =~ /^\w[\w\-]+$/) ...
Good · Perl
CVE ID 标题 CVSS 风险等级 Published
CVE-2023-0789 phpMyFAQ 命令注入漏洞 — thorsten/phpmyfaq 8.1 High 2023-02-12
CVE-2022-45104 部分Dell产品 操作系统命令注入漏洞 — Unisphere for PowerMax vApp 8.8 High 2023-02-10
CVE-2023-0649 dst-admin 命令注入漏洞 — dst-admin 6.3 Medium 2023-02-02
CVE-2023-0648 dst-admin 命令注入漏洞 — dst-admin 6.3 Medium 2023-02-02
CVE-2023-0647 dst-admin 命令注入漏洞 — dst-admin 6.3 Medium 2023-02-02
CVE-2023-0646 dst-admin 命令注入漏洞 — dst-admin 6.3 Medium 2023-02-02
CVE-2023-0640 TRENDnet TEW-811DRU 命令注入漏洞 — TEW-652BRP 7.2 High 2023-02-02
CVE-2023-0638 TRENDnet TEW-811DRU 命令注入漏洞 — TEW-811DRU 7.2 High 2023-02-02
CVE-2023-22657 F5 BIG-IP 命令注入漏洞 — F5OS-A 7.0 High 2023-02-01
CVE-2023-0611 TRENDnet TEW-652BRP 命令注入漏洞 — TEW-652BRP 8.8 High 2023-02-01
CVE-2022-45095 Dell PowerScale OneFS 命令注入漏洞 — PowerScale OneFS 6.7 Medium 2023-02-01
CVE-2021-41231 OpenMage Magento Lts 代码问题漏洞 — magento-lts 7.2 High 2023-01-27
CVE-2021-41144 OpenMage LTS 命令注入漏洞 — magento-lts 8.8 High 2023-01-27
CVE-2021-41143 OpenMage Magento Lts 路径遍历漏洞 — magento-lts 7.2 High 2023-01-27
CVE-2021-39217 OpenMage LTS 命令注入漏洞 — magento-lts 7.2 High 2023-01-27
CVE-2023-22884 Apache Airflow 命令注入漏洞 — Apache Airflow 9.8 - 2023-01-21
CVE-2023-20045 Cisco RV160和RV260 输入验证错误漏洞 — Cisco Small Business RV Series Router Firmware 4.9 Medium 2023-01-19
CVE-2023-20026 Cisco Small Business RV016 输入验证错误漏洞 — Cisco Small Business RV Series Router Firmware 6.5 Medium 2023-01-19
CVE-2023-0315 Froxlor 命令注入漏洞 — froxlor/froxlor 8.8 - 2023-01-16
CVE-2022-4616 Delta Electronics DX-3021 命令注入漏洞 — 4G Router DX-3021 7.2 High 2023-01-12
CVE-2020-36650 IonicaBizau node-gry 命令注入漏洞 — node-gry 5.5 Medium 2023-01-11
CVE-2022-45094 Siemens SINEC NMS 命令注入漏洞 — SINEC INS 8.4 High 2023-01-10
CVE-2020-36642 JOBE 命令注入漏洞 — jobe 5.5 Medium 2023-01-06
CVE-2021-4304 EPrints User Group ulcc-core 命令注入漏洞 — ulcc-core 6.3 Medium 2023-01-05
CVE-2022-39081 UNISOC chipset 安全漏洞 — SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 6.7 - 2023-01-04
CVE-2022-39082 UNISOC chipset 安全漏洞 — SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 6.7 - 2023-01-04
CVE-2022-39083 UNISOC chipset 安全漏洞 — SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 6.7 - 2023-01-04
CVE-2022-39084 UNISOC chipset 安全漏洞 — SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 6.7 - 2023-01-04
CVE-2022-39085 UNISOC chipset 安全漏洞 — SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 6.7 - 2023-01-04
CVE-2022-39086 UNISOC chipset 安全漏洞 — SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 6.7 - 2023-01-04

CWE-77（在命令中使用的特殊元素转义处理不恰当(命令注入)） 是常见的弱点类别，本平台收录该类弱点关联的 1387 条 CVE 漏洞。