- Vendor / Project
- CWP
- Product
- Control Web Panel
- Date added
- Jan 17, 2023
- Due date
- Feb 7, 2023
- Known ransomware use
- Unknown
- CWEs
- CWE-78
Description
CWP Control Web Panel (formerly CentOS Web Panel) contains an OS command injection vulnerability that allows remote attackers to execute commands via shell metacharacters in the login parameter.
Required action
Apply updates per vendor instructions.