Lucene search
Wiz BlogWIZBLOG:532A0480EF159AEECF85215A9DA01DC9HistoryJan 17, 2023 - 1:17 p.m.
CVE-2022-44877, critical RCE in CentOS Control Web Panel exploited in the wild: everything you need to know
2023-01-1713:17:11
Wiz Blog
www.wiz.io
8
cve-2022-44877
rce
centos control web panel
exploited
security teams
patch
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.974 High
EPSS
Percentile
99.9%
Detect and mitigate CVE-2022-44877, a CentOS Control Web Panel (CWP) unauthenticated RCE exploited in the wild. Security teams are advised to patch urgently.
Related
packetstorm
packetstorm
Control Web Panel 7 Remote Code Execution
2023-01-09 00:00:00
Control Web Panel Unauthenticated Remote Command Execution
2023-01-31 00:00:00
Control Web Panel 7 (CWP7) 0.9.8.1147 Remote Code Execution
2023-04-06 00:00:00
cve
cve
CVE-2022-44877
2023-01-05 23:15:09
zdt
zdt
Control Web Panel 7 Remote Code Execution Vulnerability
2023-01-10 00:00:00
Control Web Panel 7 (CWP7) v0.9.8.1147 - Remote Code Execution Exploit
2023-04-05 00:00:00
Control Web Panel Unauthenticated Remote Command Execution Exploit
2023-01-31 00:00:00
prion
prion
Design/Logic Flaw
2023-01-05 23:15:00
nuclei
nuclei
CentOS Web Panel 7 <0.9.8.1147 - Remote Code Execution
2023-01-07 07:01:12
cisa_kev
cisa_kev
CWP Control Web Panel OS Command Injection Vulnerability
2023-01-17 00:00:00
nessus
nessus
attackerkb
attackerkb
CVE-2022-44877
2023-01-05 00:00:00
metasploit
metasploit
CWP login.php Unauthenticated RCE
2023-01-20 14:04:24
githubexploit
githubexploit
Exploit for OS Command Injection in Control-Webpanel Webpanel
2023-02-15 15:22:48
Exploit for OS Command Injection in Control-Webpanel Webpanel
2023-01-06 16:53:51
Exploit for OS Command Injection in Control-Webpanel Webpanel
2023-02-11 20:45:08
thn
thn
cvelist
cvelist
CVE-2022-44877
2023-01-05 00:00:00
nvd
nvd
CVE-2022-44877
2023-01-05 23:15:09
exploitdb
exploitdb
Centos Web Panel 7 v0.9.8.1147 - Unauthenticated Remote Code Execution (RCE)
2023-04-01 00:00:00
Control Web Panel 7 (CWP7) v0.9.8.1147 - Remote Code Execution (RCE)
2023-04-05 00:00:00
rapid7blog
rapid7blog
Exploitation of Control Web Panel CVE-2022-44877
2023-01-19 19:04:48
Metasploit Weekly Wrap-Up
2023-02-03 19:21:26
What’s New in InsightVM and Nexpose: Q1 2023 in Review
2023-03-31 15:44:29
trellix
trellix
The Bug Report January 2023 Edition
2023-02-01 00:00:00
The Bug Report January 2023 Edition
2023-02-01 00:00:00
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.974 High
EPSS
Percentile
99.9%
Related for WIZBLOG:532A0480EF159AEECF85215A9DA01DC9