{"uuid": "9741a81b-d6b2-484a-9dfa-eb4a7a8587c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-45467", "type": "seen", "source": "https://t.me/hacking_Attack/40084", "content": "Black Hat Ethical Hacking\nCWP bugs allow code execution as root on Linux servers\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png CWP bugs allow code execution as root on Linux serversPost Views: 196 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 1 Minute\nTwo security vulnerabilities that impact the Control Web Panel (CWP) software can be chained by unauthenticated attackers to gain remote code execution (RCE) as root on vulnerable Linux servers. CWP, previously known as CentOS Web Panel, is a free Linux control panel for managing dedicated web hosting\u00a0servers and virtual private servers.\n\nThe two security flaws found by Octagon Networks\u2019 Paulos Yibelo\u00a0are a file inclusion vulnerability (CVE-2021-45467) and a file write (CVE-2021-45466) bug that lead to RCE when chained together.\n\nIn short, successful exploitation requires bypassing security protections to prevent attackers from reaching the restricted API section without authentication.\n\nThis can be done by registering an API key using the file inclusion bug and creating a malicious authorized_keys file on the server using the file write flaw.\nSee Also: Complete Offensive Security and Ethical Hacking Course While the CVE-2021-45467 file inclusion vulnerability was patched, Octagon Networks says that they saw how \u201csome managed to reverse the patch and exploit some servers.\u201d\nOctagon Networks says that, while the CVE-2021-45467 file inclusion vulnerability was patched,\u00a0they saw how \u201csome managed to reverse the patch and exploit some servers.\u201d\n\nThe security researchers also said they would release a proof-of-concept exploit for this pre-auth RCE chain after enough Linux servers running CWP will get upgraded to the latest version.\nSee Also: McAfee Bug Can Be Exploited to Gain Windows SYSTEM Privileges According to CWP\u2019s developers, their software supports the following operating systems: CentOS, Rocky Linux, Alma Linux, and Oracle Linux\n\nWhile the CWP site claims that roughly 30,000 servers are running CWP, BleepingComputer found almost 80,000 Internet-exposed CWP servers\u00a0on BinaryEdge. \n\nOver 200,000 can also be found on\u00a0Shodan and Censys, according to the researchers who discovered the pre-authentication RCE chain.\nSee Also: OSINT Tool: Commit Stream Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com\nSee Also: Stuxnet \u2013 A weapon made out of code that almost started WW3 Source: threatpost.com (Click Link)https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/merch.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/mcafee-d2c-90x90.jpg McAfee Bug Can Be Exploited to Gain Windows SYSTEM Privileges1 day ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/ezgif.com-gif-maker-12-90x90.jpg Cisco bug gives remote attackers root privileges via debug mode4 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/ezgif.com-gif-maker-11-1-90x90.jpg Beijing Olympics App Flaws Allow Man-in-the-Middle Attacks5 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/ezgif.com-gif-maker-10-90x90.jpg SSRF vulnerability in VMWare authentication software could allow access to user data6 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/Safari-Apple-navigateur-90x90.j[...]", "creation_timestamp": "2026-09-02T01:02:21.180349Z"}