PT-2022-6464 · Mgt Commerce · Mgt-Commerce Cloudpanel

Tod Beardsley · CVE-2023-0391 · Published 2022-12-12 · Updated 2023-03-27

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions MGT-COMMERCE CloudPanel version 2.2.0

Description The issue is related to the use of a static SSL certificate with a hardcoded cryptographic key in MGT-COMMERCE CloudPanel, which is shared across every installation. This could allow a remote attacker to gain unauthorized access to protected information. The behavior was observed in version 2.2.0, and there is no indication that it has been addressed in version 2.2.1.

Recommendations For version 2.2.0, consider disabling the use of the static SSL certificate until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Using Hardcoded Credentials

Weakness Enumeration

CWE-321

CWE-798

Related Identifiers

BDU:2023-01566

CVE-2023-0391

Affected Products

Mgt-Commerce Cloudpanel

References · 12

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/0xxx/CVE-2023-0391.json · Exploit
• 🔥 https://rapid7.com/blog/post/2023/03/21/cve-2023-0391-mgt-commerce-cloudpanel-shared-certificate-vulnerability-and-weak-installation-procedures · Exploit
• 🔥 https://bleepingcomputer.com/news/security/cloudpanel-installations-use-the-same-ssl-certificate-private-key · Exploit
• https://osv.dev/vulnerability/CVE-2023-0391 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-01566 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-0391 · Security Note
• https://t.me/cvenotify/46575 · Telegram Post
• https://vuldb.com/?id.223504 · Note
• https://t.me/cibsecurity/60415 · Telegram Post
• https://t.me/cvenotify/46583 · Telegram Post
• https://t.me/true_secator/4200 · Telegram Post
• https://t.me/echeloneyes/1345 · Telegram Post