Control Web Panel
ProductAm I affected?
Checked against NVD affected-version data on our server. Nothing you type is stored.
Security timeline
- Malware reported by The Hacker NewsBackdoor Hidden in Control Web Panel Server Runs Commands Without Logging
- Malware reported by BleepingComputerNew Linux malware CWPdoor spread through a trojanized CWP web server
Recent news
Backdoor Hidden in Control Web Panel Server Runs Commands Without Logging
QiAnXin's XLab reports a backdoor inside the web server component of Control Web Panel (CWP), a free panel for managing Linux hosting servers. It executes attacker-supplied commands sent as web requests, and those requests do not appear in access logs. Installing it requires root access, so the attackers must already control the host.
New Linux malware CWPdoor spread through a trojanized CWP web server
A new Linux malware family, CWPdoor, is being distributed via a trojanised build of cwpsrv, the web server behind the Control Web Panel (CWP) management interface. The malicious backdoor enables attackers to gain access to affected Linux servers.