Vulnerabilities > Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

DATE CVE VULNERABILITY TITLE RISK
2022-07-21 CVE-2022-20880 OS Command Injection vulnerability in Cisco products
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code on an affected device or cause the device to restart unexpectedly, resulting in a denial of service (DoS) condition.
network
low complexity
cisco CWE-78
7.2
2022-07-21 CVE-2022-22555 OS Command Injection vulnerability in Dell products
Dell EMC PowerStore, contains an OS command injection Vulnerability.
local
low complexity
dell CWE-78
6.7
2022-07-21 CVE-2022-33923 OS Command Injection vulnerability in Dell products
Dell PowerStore, versions prior to 3.0.0.0, contains an OS Command Injection vulnerability in PowerStore T environment.
local
low complexity
dell CWE-78
7.8
2022-07-20 CVE-2022-2486 OS Command Injection vulnerability in Wavlink Wl-Wn535K2 Firmware and Wl-Wn535K3 Firmware
A vulnerability, which was classified as critical, was found in WAVLINK WN535K2 and WN535K3.
network
low complexity
wavlink CWE-78
critical
9.8
2022-07-20 CVE-2022-2487 OS Command Injection vulnerability in Wavlink Wl-Wn535K2 Firmware and Wl-Wn535K3 Firmware
A vulnerability has been found in WAVLINK WN535K2 and WN535K3 and classified as critical.
network
low complexity
wavlink CWE-78
critical
9.8
2022-07-20 CVE-2022-2488 OS Command Injection vulnerability in Wavlink Wl-Wn535K2 Firmware and Wl-Wn535K3 Firmware
A vulnerability was found in WAVLINK WN535K2 and WN535K3 and classified as critical.
network
low complexity
wavlink CWE-78
critical
9.8
2022-07-19 CVE-2022-34538 OS Command Injection vulnerability in DW Megapix Firmware 4.2.0.32842
Digital Watchdog DW MEGApix IP cameras A7.2.2_20211029 was discovered to contain a command injection vulnerability in the component /admin/vca/bia/addacph.cgi.
network
low complexity
dw CWE-78
8.8
2022-07-19 CVE-2022-34539 OS Command Injection vulnerability in DW Megapix Firmware 4.2.0.32842
Digital Watchdog DW MEGApix IP cameras A7.2.2_20211029 was discovered to contain a command injection vulnerability in the component /admin/curltest.cgi.
network
low complexity
dw CWE-78
8.8
2022-07-19 CVE-2022-34540 OS Command Injection vulnerability in DW Megapix Firmware 4.2.0.32842
Digital Watchdog DW MEGApix IP cameras A7.2.2_20211029 was discovered to contain a command injection vulnerability in the component /admin/vca/license/license_tok.cgi.
network
low complexity
dw CWE-78
8.8
2022-07-19 CVE-2022-27373 OS Command Injection vulnerability in Phicomm Fir303B Firmware
Shanghai Feixun Data Communication Technology Co., Ltd router fir302b A2 was discovered to contain a remote command execution (RCE) vulnerability via the Ping function.
network
low complexity
phicomm CWE-78
8.8