CVE-2019-15107criticalunder attackransomwareCWE-78

CVE-2019-15107

Published · Updated

Follow this CVE+ Monitor Webmin

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

100Vexday Risk Score

Patch now. It under exploitation confirmed by CISA and has a working public exploit.

ssvc Actcvss 9.8epss 100%
from disclosure to weapon3 days
Published on NVDAug 16
1st PoC+3d
metasploitAug 10
CISA KEV+952d
Action required by CISAfederal deadline: 2022-04-15

Apply updates per vendor instructions.

In short

Webmin versions up to 1.920 allow attackers to run arbitrary commands on a server through the password change function. This is critical because it gives complete control over the affected system.

Technical detail

The 'old' parameter in password_change.cgi is vulnerable to OS command injection (CWE-78), allowing unauthenticated or authenticated attackers to execute arbitrary system commands with the privileges of the Webmin process. Exploitation requires network access to the Webmin interface and can result in complete system compromise.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

An issue was discovered in Webmin <=1.920. The parameter old in password_change.cgi contains a command injection vulnerability.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
n/a · n/a
public PoCs found — 92✓ VexDay Proof
cve_reference✓ VexDay Proofwww.exploit-db.com/exploits/47230exploitdbwww.exploit-db.com/exploits/47293unverifiedgithubgithub.com/jas502n/CVE-2019-15107★ 66githubgithub.com/MuirlandOracle/CVE-2019-15107★ 56githubgithub.com/K3ysTr0K3R/CVE-2019-15107-EXPLOIT★ 10githubgithub.com/hannob/webminex★ 8githubgithub.com/n0obit4/Webmin_1.890-POC★ 7githubgithub.com/ruthvikvegunta/CVE-2019-15107★ 6githubgithub.com/AdministratorGithub/CVE-2019-15107★ 5githubgithub.com/squid22/Webmin_CVE-2019-15107★ 3githubgithub.com/whokilleddb/CVE-2019-15107★ 3githubgithub.com/NasrallahBaadi/CVE-2019-15107★ 3githubgithub.com/Mattb709/CVE-2019-15107-Scanner★ 3githubgithub.com/AleWong/WebminRCE-EXP-CVE-2019-15107-★ 3githubgithub.com/wenruoya/CVE-2019-15107★ 2githubgithub.com/HACHp1/webmin_docker_and_exp★ 2githubgithub.com/MasterCode112/CVE-2019-15107★ 1githubgithub.com/Rayferrufino/Make-and-Break★ 1githubgithub.com/TheAlpha19/MiniExploit★ 1githubgithub.com/Mattb709/CVE-2019-15107-Webmin-RCE-PoC★ 1githubgithub.com/CyberTuz/CVE-2019-15107_detection★ 0githubgithub.com/olingo99/CVE-2019-15107★ 0githubgithub.com/adampawelczyk/cve-2019-15107★ 0githubgithub.com/shambhaviM18/cve-2019-15107-lab★ 0githubgithub.com/CyberCTF/vulhub-webmin-cve-2019-15107★ 0githubgithub.com/hadrian3689/webmin_1.920★ 0githubgithub.com/f0rkr/CVE-2019-15107★ 0githubgithub.com/psw01/CVE-2019-15107_webminRCE★ 0githubgithub.com/h4ck0rman/CVE-2019-15107★ 0githubgithub.com/g1vi/CVE-2019-15107★ 0githubgithub.com/D4rkScare/CVE-2019-15107★ 0githubgithub.com/bayazid-bit/CVE-2019-15107★ 0githubgithub.com/viglia/cve-2019-15107★ 0githubgithub.com/EdouardosStav/CVE-2019-15107-RCE-WebMin★ 0githubgithub.com/ketlerd/CVE-2019-15107★ 0githubgithub.com/ch4ko/webmin_CVE-2019-15107★ 0githubgithub.com/0x4r2/Webmin-CVE-2019-15107★ 0githubgithub.com/jini135wii/CVE-2019-15107★ 0githubgithub.com/diegojuan/CVE-2019-15107★ 0githubgithub.com/cdedmondson/Modified-CVE-2019-15107★ 0githubgithub.com/ianxtianxt/CVE-2019-15107★ 0githubgithub.com/hacknotes/CVE-2019-15107-Exploit★ 0githubgithub.com/ArtemCyberLab/Project-Exploitation-of-Webmin-Authentication-Vulnerability★ 0githubgithub.com/gozn/detect-CVE-2019-15107-by-pyshark★ 0githubgithub.com/darrenmartyn/CVE-2019-15107★ 0cve_referencepacketstormsecurity.com/files/154485/Webmin-1.920-Remote-Code-Execution.htmlunverifiedcve_referencepacketstormsecurity.com/files/154197/Webmin-1.920-password_change.cgi-Backdoor.htmlunverifiedvulncheckvulncheck.com/xdb/96a5081bd628unverifiedcve_referencepacketstormsecurity.com/files/154141/Webmin-Remote-Comman-Execution.htmlunverifiedvulncheckvulncheck.com/xdb/20196945d3c2unverifiedvulncheckvulncheck.com/xdb/9bbe351314fbunverifiedvulncheckvulncheck.com/xdb/0d4e36cd4a95unverifiedvulncheckvulncheck.com/xdb/2f1790e0c923unverifiedvulncheckvulncheck.com/xdb/8fef7765523bunverifiedvulncheckvulncheck.com/xdb/c749357d2521unverifiedvulncheckvulncheck.com/xdb/486adc8e3e40unverifiedvulncheckvulncheck.com/xdb/c6da575a25d8unverifiedvulncheckvulncheck.com/xdb/a13dbcc678b1unverifiedvulncheckvulncheck.com/xdb/4c6823870c85unverifiedvulncheckvulncheck.com/xdb/90ca878ea23aunverifiedvulncheckvulncheck.com/xdb/52c4d17f7d4aunverifiedvulncheckvulncheck.com/xdb/73c54650e7c3unverifiedvulncheckvulncheck.com/xdb/e9a6c303fcfdunverifiedvulncheckvulncheck.com/xdb/908f11836959unverifiedvulncheckvulncheck.com/xdb/075aff434240unverifiedvulncheckvulncheck.com/xdb/a6c954e87af6unverifiedvulncheckvulncheck.com/xdb/6d77d7695cd4unverifiedvulncheckvulncheck.com/xdb/bc9b78848768unverifiedvulncheckvulncheck.com/xdb/26ea3ae3926dunverifiedvulncheckvulncheck.com/xdb/86807142d202unverifiedvulncheckvulncheck.com/xdb/36f3e23cc53aunverifiedvulncheckvulncheck.com/xdb/346894239882unverifiedvulncheckvulncheck.com/xdb/beaa095869bdunverifiedvulncheckvulncheck.com/xdb/50552f993bb1unverifiedvulncheckvulncheck.com/xdb/a990debb490eunverifiedvulncheckvulncheck.com/xdb/b745f18fe915unverifiedvulncheckvulncheck.com/xdb/c4581c84425bunverifiedvulncheckvulncheck.com/xdb/481f4128612dunverifiedvulncheckvulncheck.com/xdb/645d8ca04538unverifiedvulncheckvulncheck.com/xdb/bfb7ca362af4unverifiedvulncheckvulncheck.com/xdb/0d2cd9698102unverifiedvulncheckvulncheck.com/xdb/e5d9d10c9291unverifiedvulncheckvulncheck.com/xdb/91ebdf06889eunverifiedvulncheckvulncheck.com/xdb/660292b95806unverifiedvulncheckvulncheck.com/xdb/8d9cadf4b346unverifiedvulncheckvulncheck.com/xdb/323c8177e804unverifiedvulncheckvulncheck.com/xdb/e6dd22bbd303unverifiedvulncheckvulncheck.com/xdb/31a0904d05d9unverifiedvulncheckvulncheck.com/xdb/2e9eb90806b3unverifiedcve_referencepacketstormsecurity.com/files/154141/Webmin-1.920-Remote-Command-Execution.htmlunverifiedvulncheckvulncheck.com/xdb/4fd2ccb44e6cunverifiedvulncheckvulncheck.com/xdb/5451629a8ddfunverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.