Fixed Intel

CISA Known Exploited Vulnerability

This vulnerability is actively exploited in the wild and listed in the CISA Known Exploited Vulnerabilities catalog.

Remediation Deadline: Nov 28, 2024

CVE-2024-51567

High
EPSS 94.3%CISA KEVRansomware
CyberPersons/CyberPanel

Description

CyberPanel contains an incorrect default permissions vulnerability that allows a remote, unauthenticated attacker to execute commands as root.

EPSS — Exploit Probability

94.3%

Higher than 99.9% of all CVEs

Required Action

https://cyberpanel.net/blog/detials-and-fix-of-recent-security-issue-and-patch-of-cyberpanel ; https://nvd.nist.gov/vuln/detail/CVE-2024-51567

Risk Assessment

CRITICAL
In CISA KEV
High EPSS
Ransomware

Details

Severity
High
EPSS
94.3%
CISA KEV
Yes
Ransomware
Known
Articles
0

Timeline

Published

Nov 7, 2024

Added to KEV

Nov 7, 2024

Remediation Due

Nov 28, 2024

Affected Product

CyberPersons

CyberPanel

View all CyberPersons CVEs