CVE-2022-44877

UNKNOWNKnown Exploited

CISA Known Exploited Vulnerability

https://control-webpanel.com/changelog#1669855527714-450fb335-6194; https://nvd.nist.gov/vuln/detail/CVE-2022-44877

Remediation deadline: February 7, 2023

Description

CWP Control Web Panel (formerly CentOS Web Panel) contains an OS command injection vulnerability that allows remote attackers to execute commands via shell metacharacters in the login parameter.

Timeline

Published:January 17th, 2023 12:00 AM

Last modified:January 17th, 2023 12:00 AM

Added to KEV:January 17th, 2023

CVSS Scoring

No CVSS v3 score available

Affected Software

From NVD CPE configuration data

Vendors

CWP

Products

Control Web Panel

Weaknesses (CWE)

CWE-78

References & Reports

Advisories, patches, and third-party reports

No references available.

Source: CISA KEV + NVD · Data may lag official sources by up to one minute