Outbreak Alert: Control Web Panel (CWP) Command Injection Vulnerability

FortiRecon provides outside-in coverage for risks towards customers.

External Attack Surface Management helps customers to identify exposure to known and unknown enterprise assets and associated vulnerabilities across the enterprise.

Vulnerability Intelligence Module under Adversary Centric Intelligence (ACI) provides realistic view of impact of the vulnerability based upon chatter and discussion of the same across various external sources such as Darkweb, social media, News / Blogs etc.

CVE ID

CVE-2022-44877

CVE Title

Control Web Panel (CWP) Command Injection Vulnerability

CVE Severity

High

ACI Reporting Coverage

2 Reports (TECHINT/Darknet)

Additional References

• 3 articles reference this CVE on security blogs.
• 1 article referencing possibly working exploit(s) for this vulnerability.
• 3 public code repositories containing possible POC exploits for this vulnerability.

·       494 mentions on social media for this vulnerability.

EASM Scanner

Yes