CVE-2022-44877 CWP Control Web Panel
CWP Control Web Panel (formerly CentOS Web Panel) contains an OS command injection vulnerability that allows remote attackers to execute commands via shell metacharacters in the login parameter.
- CVSS
- not scored
On CISA’s exploited list
CWP Control Web Panel OS Command Injection Vulnerability
- Added
- 2023-01-17
- Federal patch deadline
- 2023-02-07
- Ransomware use
- not known