Threat actors exploit Control Web Panel RCE
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2022-44877 | Remote OS Command Injection in CWP Control Web Panel | 9.8 | 100% | KEVPoC ×6 | KEV |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| ipv4 | 206.189.170.136 | Web Panel 7 Unauthenticated Remote Code Execution). Source: 206.189.170.136 🇺🇸 Malicious Base64 payload is a reverse shell that conne |
From the original article
1 min read at securityaffairs.com
Threat actors are actively exploiting a recently patched critical remote code execution (RCE) vulnerability in Control Web Panel (CWP). Threat actors are actively exploiting a recently patched critical vulnerability, tracked as CVE-2022-44877 (CVSS score: 9. 8), in Control Web Panel (CWP).
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.