Paper/Archive/CVE-2024-51567

CVE-2024-51567

cyberpanel cyberpanel — CyberPanel Incorrect Default Permissions Vulnerability

KEV · due 28 Nov ransomware use EPSS 84%public exploit SSVC act CVSS 10.0

100

CVSS 10.0 (CNA)10.0 / 10 × 3030.0 In CISA KEV+3030.0 EPSS percentile 99.7.997 × 2019.9 Exploit: SSVC active+1010.0 SSVC exploitation: active+1010.0

Description · from the CVE record

upgrademysqlstatus in databases/views.py in CyberPanel (aka Cyber Panel) before 5b08cd6 allows remote attackers to bypass authentication and execute arbitrary commands via /dataBases/upgrademysqlstatus by bypassing secMiddleware (which is only for a POST request) and using shell metacharacters in the statusfile property, as exploited in the wild in October 2024 by PSAUX. Versions through 2.3.6 and (unpatched) 2.3.7 are affected.

Affected

ProductAffectedFixed inSource

n/an/a–CNA

cyberpanel≤ 5b08cd6–CISA-ADP

Scores by source

mitre (CNA)10.0CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:C/UI:N

CISA ADPSSVCExploitation: active · Automatable: yes · Technical impact: total

References

refcwe.mitre.org/data/definitions/78.html refdreyand.rs/code/review/2024/10/27/what-are-my-options-cyberpanel-v236-pre-auth-rce refgithub.com/usmannasir/cyberpanel/commit/5b08cd6d53f4dbc2107ad9f555122ce8b0996515 refcyberpanel.net/KnowledgeBase/home/change-logs refcwe.mitre.org/data/definitions/420.html refcyberpanel.net/blog/detials-and-fix-of-recent-security-issue-and-patch-of-cyberpanel refbleepingcomputer.com/news/security/massive-psaux-ransomware-attack-targets-22-000-cyberpanel-instances refcisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-51567 kevcisa.gov/known-exploited-vulnerabilities-catalog