Remote Code Execution

⚔️ Attack Types Related 2,906
slug: rce

Explanation

RCE (Remote Code Execution) は「攻撃者が遠隔から、サーバー上で任意のプログラムを実行できる」最も深刻な脆弱性です。 これが成立すると、サーバー全体が乗っ取られ、データ全削除・暗号通貨マイニング・ランサムウェア感染・他社攻撃の踏み台化など何でもされます。 セキュリティ業界では「最悪レベル」「最優先で塞ぐべき」と扱われます。
📌 Example
Log4Shell (CVE-2021-44228), Heartbleed (CVE-2014-0160) の後継 OpenSSL系, MOVEit Transfer (CVE-2023-34362) など。被害規模は数千億円〜兆円単位。

🔖 Related tags

🛡 Vulnerabilities tagged with this 2,908

Image ID Title
CVE-2020-17091 Code Injection in Microsoft Teams (CVE-2020-17091)
CVE-2020-17003 Buffer Overflow in Microsoft 3D Viewer (CVE-2020-17003)
CVE-2020-16918 Out-of-Bounds Write in Microsoft 365 Apps (CVE-2020-16918)
CVE-2022-28944 Vulnerability in Microsoft Windows (CVE-2022-28944)
CVE-2022-29109 Vulnerability in Microsoft Office (CVE-2022-29109)
CVE-2022-26926 Vulnerability in Microsoft Windows 10 (CVE-2022-26926)
CVE-2022-26987 Out-of-Bounds Write in TP-Link TL-WDR7660 (CVE-2022-26987)
CVE-2022-26988 Out-of-Bounds Write in TP-Link TL-WDR7660 (CVE-2022-26988)
CVE-2022-27224 Command Injection in Galleon NTS-6002-GPS (CVE-2022-27224)
CVE-2022-28568 Unrestricted File Upload in Sourcecodester Doctor (CVE-2022-28568)
CVE-2021-43164 OS Command Injection in Ruijie Networks Ruijie RG-EW Series Routers (CVE-2021-43164)
CVE-2021-43159 Command Injection in Ruijie Networks Ruijie RG-EW Series Routers (CVE-2021-43159)
CVE-2021-43160 Command Injection in Ruijie Networks Ruijie RG-EW Series Routers (CVE-2021-43160)
CVE-2021-43161 Command Injection in Ruijie Networks Ruijie RG-EW Series Routers (CVE-2021-43161)
CVE-2021-43163 Command Injection in Ruijie Networks Ruijie RG-EW Series Routers (CVE-2021-43163)
CVE-2021-43162 Command Injection in Ruijie Networks Ruijie RG-EW Series Routers (CVE-2021-43162)
CVE-2021-44596 Vulnerability in Wondershare LTD Dr. Fone as of (CVE-2021-44596)
CVE-2022-26901 Vulnerability in Microsoft Excel (CVE-2022-26901)
CVE-2022-26826 Command Injection in Microsoft Windows 10 (CVE-2022-26826)
CVE-2022-24545 Vulnerability in Windows Kerberos (CVE-2022-24545)
CVE-2022-24473 Vulnerability in Microsoft Office (CVE-2022-24473)
CVE-2018-7602 KEV [KEV] Code Injection in Drupal Core (CVE-2018-7602)
CVE-2021-40219 Code Injection in Bolt (CVE-2021-40219)
CVE-2022-26607 Unrestricted File Upload in Baigo (CVE-2022-26607)
CVE-2022-26645 Unrestricted File Upload in Online Banking System Protect (CVE-2022-26645)
CVE-2021-38646 KEV [KEV] Vulnerability in Microsoft Office (CVE-2021-38646)
CVE-2021-40904 Vulnerability in Checkmk (CVE-2021-40904)
CVE-2021-40905 Unrestricted File Upload in Checkmk (CVE-2021-40905)
CVE-2020-9054 KEV [KEV] OS Command Injection in Zyxel Multiple Network-Attached Storage (NAS) Devices (CVE-2020-9054)
CVE-2018-1273 KEV [KEV] Code Injection in VMware Tanzu Spring Data Commons (CVE-2018-1273)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details