Critical Vulnerability in Control Web Panel Exploited in the Wild

FortiGuard Labs is aware of a report that a patched but critical vulnerability in Control Web Panel (CWP) is being exploited in the wild. The vulnerability (CVE-2022-44877) is a command injection vulnerability that allows remote attackers to execute arbitrary OS commands via shell metacharacters in the login parameter. Proof-of-concept code is reportedly available.Control Web Panel (formerly CentOS web panel) is a server administration user interface used to manage Linux systems.Why is this Significant?This is significant because a critical vulnerability in …

attackers aware centos centos web panel code command command injection concept control control web panel critical critical vulnerability cve cve-2022-44877 exploited injection labs linux login manage panel parameter proof-of-concept report server shell systems user interface vulnerability web