Control Web Panel - RCE (CVE-2022-44877)

CVE-2022-44877 is a critical vulnerability affecting Control Web Panel that allows remote attackers to execute arbitrary operating system commands by manipulating the login input parameter.

CrowdSec has been tracking this vulnerability and its exploits since 20th of January 2023.

CrowdSec network data shows that most actors exploiting CVE-2022-44877 rely on broad, untargeted scans with minimal filtering. The activity is largely automated and opportunistic in nature. Additionally, according to week-over-week analysis by CrowdSec, exploitation of CVE-2022-44877 is surging. Attack volumes are spiking well above historical norms, indicating widespread and escalating interest from threat actors. CVE-2022-44877 is currently experiencing high visibility and active exploitation across the internet.

Exploitation attempts frequently involve requests to URLs referencing login/index.php.