A vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote attacker to inject commands with the privileges of root. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted input to the web UI. A successful exploit could allow the attacker to inject commands to the underlying operating system with root privileges.
References
Link | Resource |
---|---|
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-webui-privesc-j22SaA4z | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
AND |
|
History
17 Jun 2024, 13:29
Type | Values Removed | Values Added |
---|---|---|
CWE |
25 Jan 2024, 17:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
15 Nov 2023, 19:13
Type | Values Removed | Values Added |
---|---|---|
References | () http://packetstormsecurity.com/files/175674/Cisco-IOX-XE-Unauthenticated-Remote-Code-Execution.html - Exploit, Third Party Advisory, VDB Entry |
14 Nov 2023, 03:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
07 Nov 2023, 19:15
Type | Values Removed | Values Added |
---|---|---|
Summary | A vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote attacker to inject commands with the privileges of root. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted input to the web UI. A successful exploit could allow the attacker to inject commands to the underlying operating system with root privileges. |
31 Oct 2023, 14:02
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:h:cisco:catalyst_3650-24ps-l:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3650-48pd-s:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3850-48t-l:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3850-48t-s:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3650-48fqm-l:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3850-24u:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3850-24xu:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3850-48pw-s:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3850-48xs-f-s:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3850-24xu-s:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3650-12x48ur-e:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3850-24s-s:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3650-12x48ur:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3850-24pw-s:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3650-8x24uq-s:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3850-48p-s:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3650-8x24pd-e:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3850-48p-e:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3650-12x48fd-l:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3650-24pd:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3650-24pd-e:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3650-48fq-l:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3650-48td-l:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3850:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3650-48ts-s:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3850-24t-e:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3650-24pdm:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3850-48u-e:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3650-24pdm-l:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3650-24ts-e:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3650-12x48uz-s:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3850-24p-e:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3650-12x48ur-s:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3850-48xs:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3650-48ts-e:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3850-12s-e:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3650-48fs-s:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3650-24ps-s:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3850-48u-l:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3850-24p-s:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3850-48f-l:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3650-48td-s:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3850-24t-s:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3650-24ts-s:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3850-16xs-e:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3650-48fd-e:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3650-48tq-s:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3650-48fq:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3650-12x48uq-l:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3850-48f-s:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3850-24s-e:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3850-32xs-s:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3650-48fqm-e:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3650-8x24uq-l:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3850-48f-e:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3650-48fq-s:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3850-nm-8-10g:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3850-12xs-e:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3650-48td-e:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3850-48t-e:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3850-12xs-s:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3850-24xs-e:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3650-48pq-l:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3850-12s-s:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3650-48ps-s:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3650-12x48fd-e:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3850-48p-l:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3650-24td-l:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3650-48fd-s:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3650:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3850-48xs-f-e:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3650-8x24pd-s:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3850-32xs-e:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3650-12x48ur-l:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3650-12x48uq-s:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3650-48ps-l:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3850-24u-s:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3650-24ts-l:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3650-48pq-s:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3850-24xs-s:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3850-24u-e:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3850-24xu-l:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3650-48pd-l:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3850-12x48u:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3650-8x24uq-e:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3650-24pdm-s:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3650-48fqm:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3650-12x48uz-e:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3850-16xs-s:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3850-24u-l:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3650-24pd-s:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3650-48fs-e:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3650-12x48uq:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3650-48pd-e:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3850-48u:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3650-12x48uz:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3850-24p-l:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3650-8x24pd-l:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3650-48fs-l:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3650-24td-s:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3650-48ps-e:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3650-12x48fd-s:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3650-48tq-e:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3850-24t-l:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3850-24xs:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3850-nm-2-40g:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3650-48tq-l:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3650-24td-e:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3850-48xs-e:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3650-24pdm-e:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3650-48fq-e:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3650-8x24uq:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3850-48u-s:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3650-48fd-l:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3850-24xu-e:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3650-24pd-l:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3650-24ps-e:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3850-48xs-s:-:*:*:*:*:*:*:* cpe:2.3:o:cisco:ios_xe:*:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3650-12x48uz-l:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3650-48fqm-s:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3650-48pq-e:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3650-48ts-l:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:catalyst_3650-12x48uq-e:-:*:*:*:*:*:*:* |
|
References | (MISC) https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-webui-privesc-j22SaA4z - Vendor Advisory | |
First Time |
Cisco catalyst 3850-24xs-e
Cisco catalyst 3850-16xs-e Cisco catalyst 3650 Cisco catalyst 3850-48xs-s Cisco catalyst 3850-24u-e Cisco catalyst 3650-48fq-e Cisco catalyst 3650-48fq-s Cisco catalyst 3650-24ts-s Cisco catalyst 3850-24u-l Cisco catalyst 3650-8x24uq-s Cisco catalyst 3850-24p-e Cisco catalyst 3650-48fq-l Cisco catalyst 3850-24t-l Cisco catalyst 3850-12x48u Cisco catalyst 3650-12x48ur Cisco catalyst 3850-nm-8-10g Cisco catalyst 3650-12x48uq-e Cisco catalyst 3850 Cisco catalyst 3650-8x24pd-e Cisco catalyst 3850-48u-e Cisco catalyst 3850-12xs-s Cisco catalyst 3650-24ps-l Cisco catalyst 3650-8x24pd-l Cisco catalyst 3650-12x48ur-l Cisco catalyst 3650-8x24pd-s Cisco catalyst 3650-24td-e Cisco catalyst 3850-24t-e Cisco catalyst 3650-24ts-l Cisco catalyst 3850-48p-e Cisco catalyst 3650-24td-l Cisco catalyst 3650-12x48uz Cisco catalyst 3850-48u-l Cisco catalyst 3850-nm-2-40g Cisco catalyst 3650-8x24uq Cisco catalyst 3850-48f-l Cisco catalyst 3850-48xs-e Cisco catalyst 3650-48pq-s Cisco catalyst 3850-48xs Cisco catalyst 3850-48xs-f-e Cisco catalyst 3650-48pq-e Cisco catalyst 3650-12x48uq-l Cisco catalyst 3850-48p-s Cisco catalyst 3650-48tq-e Cisco catalyst 3650-48fs-e Cisco catalyst 3650-12x48uq Cisco catalyst 3850-48t-e Cisco catalyst 3650-12x48fd-e Cisco catalyst 3650-24pd-l Cisco catalyst 3850-24xs Cisco catalyst 3850-12xs-e Cisco catalyst 3850-24xs-s Cisco catalyst 3650-48fqm-s Cisco catalyst 3850-48f-s Cisco catalyst 3850-48t-s Cisco catalyst 3650-24pd-e Cisco catalyst 3850-24xu-s Cisco catalyst 3850-24p-l Cisco Cisco catalyst 3850-48t-l Cisco catalyst 3650-48ts-s Cisco catalyst 3650-48ps-l Cisco catalyst 3650-48fd-e Cisco catalyst 3650-24ps-e Cisco catalyst 3850-48pw-s Cisco catalyst 3850-24xu-l Cisco catalyst 3850-48f-e Cisco catalyst 3650-12x48uq-s Cisco catalyst 3650-12x48uz-l Cisco catalyst 3650-24td-s Cisco catalyst 3650-12x48fd-l Cisco catalyst 3650-12x48fd-s Cisco catalyst 3650-48ts-l Cisco catalyst 3650-48td-s Cisco catalyst 3650-48pd-s Cisco catalyst 3650-48tq-s Cisco catalyst 3650-48fs-s Cisco catalyst 3650-12x48ur-e Cisco catalyst 3650-48td-l Cisco catalyst 3650-48td-e Cisco catalyst 3850-24u Cisco catalyst 3850-24xu-e Cisco catalyst 3850-24xu Cisco catalyst 3850-48p-l Cisco catalyst 3650-48pd-e Cisco catalyst 3650-48fqm-l Cisco catalyst 3850-24p-s Cisco catalyst 3650-48fqm Cisco catalyst 3650-24pdm-l Cisco catalyst 3850-24s-e Cisco catalyst 3850-16xs-s Cisco catalyst 3650-48ps-e Cisco catalyst 3650-48pq-l Cisco catalyst 3650-8x24uq-e Cisco ios Xe Cisco catalyst 3650-24ps-s Cisco catalyst 3850-12s-s Cisco catalyst 3850-48xs-f-s Cisco catalyst 3850-24t-s Cisco catalyst 3850-12s-e Cisco catalyst 3650-48fd-s Cisco catalyst 3650-24pdm Cisco catalyst 3650-48fs-l Cisco catalyst 3650-24pd-s Cisco catalyst 3650-8x24uq-l Cisco catalyst 3650-48pd-l Cisco catalyst 3650-24pdm-s Cisco catalyst 3650-48fqm-e Cisco catalyst 3850-48u Cisco catalyst 3650-48ts-e Cisco catalyst 3650-24pdm-e Cisco catalyst 3850-24u-s Cisco catalyst 3650-48ps-s Cisco catalyst 3650-48fd-l Cisco catalyst 3850-32xs-s Cisco catalyst 3650-12x48uz-s Cisco catalyst 3850-24s-s Cisco catalyst 3650-48fq Cisco catalyst 3850-32xs-e Cisco catalyst 3650-48tq-l Cisco catalyst 3650-12x48ur-s Cisco catalyst 3650-12x48uz-e Cisco catalyst 3850-24pw-s Cisco catalyst 3650-24ts-e Cisco catalyst 3850-48u-s Cisco catalyst 3650-24pd |
|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.2 |
CWE | NVD-CWE-noinfo |
25 Oct 2023, 18:17
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2023-10-25 18:17
Updated : 2024-06-17 13:29
NVD link : CVE-2023-20273
Mitre link : CVE-2023-20273
CVE.ORG link : CVE-2023-20273
JSON object : View
Products Affected
cisco
- catalyst_3650-48fd-s
- catalyst_3850-32xs-e
- catalyst_3650-48fd-e
- catalyst_3850-48p-l
- catalyst_3650-12x48fd-s
- catalyst_3850-24u-s
- catalyst_3650-8x24pd-e
- catalyst_3850-24pw-s
- catalyst_3850-48xs-s
- catalyst_3850-48xs
- catalyst_3650-48td-l
- catalyst_3650-48fqm-l
- catalyst_3850-48t-l
- catalyst_3650-24pdm-e
- catalyst_3650-48ts-e
- catalyst_3850-12s-s
- catalyst_3650-48pd-s
- catalyst_3850-24p-s
- catalyst_3650-12x48uz
- catalyst_3850-24xu
- catalyst_3650-12x48fd-e
- catalyst_3650-12x48uz-l
- catalyst_3850-24u-e
- catalyst_3850-12xs-s
- catalyst_3650-24pdm-s
- catalyst_3650-12x48ur
- catalyst_3850-48p-e
- catalyst_3850-48f-e
- catalyst_3850-16xs-e
- catalyst_3850-48u-l
- catalyst_3650-48td-s
- catalyst_3650-8x24pd-s
- catalyst_3650-48fq-s
- catalyst_3650-12x48uq-e
- catalyst_3650-48fq
- catalyst_3650-24pd-s
- catalyst_3850-24xu-e
- catalyst_3650-48pq-l
- catalyst_3650-48fs-s
- catalyst_3850-48u
- catalyst_3850-24t-l
- catalyst_3650-12x48uq
- catalyst_3650-48fq-e
- catalyst_3850-24p-e
- catalyst_3650-48tq-l
- catalyst_3850-16xs-s
- catalyst_3650-48ps-l
- catalyst_3850-12x48u
- catalyst_3650-48tq-s
- catalyst_3850-24xs-e
- catalyst_3650-8x24pd-l
- catalyst_3650-12x48uz-e
- catalyst_3650-12x48ur-l
- catalyst_3650-48pq-e
- catalyst_3650-24td-s
- catalyst_3650-24ts-s
- catalyst_3650-24pd-e
- catalyst_3850-32xs-s
- catalyst_3650-48fqm-s
- catalyst_3650-48pd-l
- catalyst_3650-8x24uq-s
- catalyst_3850-48u-e
- catalyst_3850-24s-s
- catalyst_3650-24td-l
- catalyst_3650-48fqm-e
- catalyst_3650-24ps-s
- catalyst_3850-24xs-s
- catalyst_3650-24ps-e
- catalyst_3650-8x24uq-e
- catalyst_3650-48fqm
- catalyst_3850-24xs
- catalyst_3850-48xs-e
- catalyst_3850
- catalyst_3850-48u-s
- catalyst_3850-24t-s
- catalyst_3850-24s-e
- catalyst_3650-12x48fd-l
- catalyst_3650-24pd
- catalyst_3650-8x24uq-l
- catalyst_3850-48xs-f-s
- catalyst_3850-48f-s
- catalyst_3850-48t-e
- catalyst_3850-48p-s
- catalyst_3650-24ts-e
- catalyst_3850-24u
- catalyst_3850-24xu-s
- catalyst_3650-8x24uq
- catalyst_3650-48td-e
- catalyst_3850-nm-8-10g
- catalyst_3850-48f-l
- catalyst_3850-48pw-s
- catalyst_3650-12x48ur-s
- catalyst_3650-48fq-l
- catalyst_3850-48t-s
- catalyst_3650-24td-e
- catalyst_3650-12x48uq-s
- catalyst_3650-12x48uq-l
- catalyst_3650-48pd-e
- catalyst_3650-48ps-s
- catalyst_3650-48ts-s
- catalyst_3650-48tq-e
- catalyst_3650-24pd-l
- catalyst_3650-12x48ur-e
- catalyst_3650-48fs-l
- catalyst_3850-12xs-e
- ios_xe
- catalyst_3650
- catalyst_3650-48ts-l
- catalyst_3850-24t-e
- catalyst_3650-48fd-l
- catalyst_3850-48xs-f-e
- catalyst_3650-48ps-e
- catalyst_3850-nm-2-40g
- catalyst_3650-24ts-l
- catalyst_3650-24pdm
- catalyst_3650-12x48uz-s
- catalyst_3850-24xu-l
- catalyst_3850-12s-e
- catalyst_3650-24pdm-l
- catalyst_3650-48pq-s
- catalyst_3850-24u-l
- catalyst_3850-24p-l
- catalyst_3650-48fs-e
- catalyst_3650-24ps-l
CWE
CWE-78
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')