CWPdoor backdoor hidden in Control Web Panel's web server
A hidden backdoor in a server panel lets attackers run commands unseen!
Summary
A backdoor named CWPdoor was hidden inside the web server (cwpsrv) of Control Web Panel. An attacker can send a special request to run commands, and it leaves no access log entry. Over 340,000 CWP instances exposed to the internet were named as potential targets.
Affected when
- Control Web Panel installed
What to do
No fixed version is named yet. Read the vendor's notice, and check the server for signs of infection with the check given in the writeup (ss -axp | grep integrity).
Products and platforms
Sources
Times
First published
First seen