THE INTERNET IS THINKING
Earlier sources: Command Injection
This security thread follows command injection through original research, public projects, and source reports. Read the evidence below to see which developments are represented in SYMTRI’s archive.
SYMTRI organizes observations from public sources into a living map. Connections reflect shared subject matter; they do not establish causation or endorse a source.
Open in the map ↗3 classified signals in the fourteen-day window. These counts include signals awaiting readable evidence.
Earlier sources
Up to ten sources with readable evidence, ordered by their feed timestamp. These archive sources can be older than the live fourteen-day window. This list is a sample, not a measure of total activity. Dates distinguish paper publication, repository creation, model/dataset activity, Hacker News posts, and KEV catalog additions. “First archived” records when SYMTRI first stored the signal.
- CISA · Added to KEV · First archived
CVE-2020-4006: Multiple VMware Products Command Injection Vulnerability ↗
VMware Workspace One Access, Access Connector, Identity Manager, and Identity Manager Connector contain a command injection vulnerability. An attacker with network access to the administrative configurator on port 8443 and a valid password for the configurator administrator account can execute commands with unrestricted privileges on the underlying operating system. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2021-11-03 (not the first disclosure date). Action due date: 2022-05-03.
- CISA · Added to KEV · First archived
CVE-2020-25506: D-Link DNS-320 Device Command Injection Vulnerability ↗
D-Link DNS-320 device contains a command injection vulnerability in the sytem_mgr.cgi component that may allow for remote code execution. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2021-11-03 (not the first disclosure date). Action due date: 2022-05-03.
- CISA · Added to KEV · First archived
CVE-2020-10221: rConfig OS Command Injection Vulnerability ↗
rConfig lib/ajaxHandlers/ajaxAddTemplate.php contains an OS command injection vulnerability that allows remote attackers to execute OS commands via shell metacharacters in the fileName POST parameter. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2021-11-03 (not the first disclosure date). Action due date: 2022-05-03.
- CISA · Added to KEV · First archived
CVE-2019-16256: SIMalliance Toolbox Browser Command Injection Vulnerability ↗
SIMalliance Toolbox Browser contains an command injection vulnerability that could allow remote attackers to retrieve location and IMEI information or execute a range of other attacks by modifying the attack message. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2021-11-03 (not the first disclosure date). Action due date: 2022-05-03.
- CISA · Added to KEV · First archived
CVE-2019-11539: Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability ↗
Ivanti Pulse Connect Secure and Policy Secure allows an authenticated attacker from the admin web interface to inject and execute commands. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Known. Added to the KEV catalog: 2021-11-03 (not the first disclosure date). Action due date: 2022-05-03.
- CISA · Added to KEV · First archived
CVE-2018-14558: Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability ↗
Tenda AC7, AC9, and AC10 devices contain a command injection vulnerability due to the "formsetUsbUnload" function executes a dosystemCmd function with untrusted input. Successful exploitation allows an attacker to execute OS commands via a crafted goform/setUsbUnload request. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2021-11-03 (not the first disclosure date). Action due date: 2022-05-03.
Live window recorded . This is the ingestion observation time, not the publication or discovery date of each source.
How to assess evidence about Command Injection
Check each original source for its methods, release status, limitations, and supporting data. A repository announcement, a preprint, and a published study provide different kinds of evidence. SYMTRI’s subject classification helps discovery; it does not independently validate the source’s claims.
See the collection and counting methodology ↗ · Read the weekly synthesis ↗
Related threads
Explore related regions
These navigation suggestions are part of the map’s editorial structure, rather than measured evidence of a connection.