CVE-2021-31324
CRITICAL NUCLEIControl WebPanel - Unauthenticated OS Command Injection via ID Session Parameter
Title source: llmExploitation Summary
CVE-2021-31324 has a Nuclei detection template available — see the Nuclei card below for the Shodan/FOFA recon queries.
Description
The unprivileged user portal part of CentOS Web Panel is affected by a Command Injection vulnerability leading to root Remote Code Execution.
Nuclei Templates (1)
CentOS Web Panel - OS Command Injection
CRITICALby ritikchaddha
Shodan:
title:"Login | Control WebPanel"
FOFA:
title="Login | Control WebPanel"
References (1)
Core 1
Core References
Exploit, Third Party Advisory x_refsource_misc
https://www.shielder.it/advisories/centos-web-panel-idsession-root-rce/
Scores
CVSS v3
9.8
EPSS
0.3406
EPSS Percentile
98.2%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-78
Status
published
Products (1)
control-webpanel/webpanel
Published
May 18, 2021
Tracked Since
Feb 18, 2026