RULE(RULE ID:338679)

Rule General Information
Release Date: 2025-02-11
Rule Name: NginxWebUI runNginxCmd Remote Command Execution Vulnerability
Severity:
CVE ID:
Rule Protection Details
Description: NginxWebUI is a tool for graphically managing nginx configuration. NginxWebUI runNginxCmd interface has an unauthorized remote command execution vulnerability that allows an attacker to execute arbitrary commands directly on the server.
Impact: An attacker can execute arbitrary command via a successful exploit in the context of the vulnerable software.
Affected OS: Windows, Linux, Others
Reference:
Solutions
Please contact the software vendor to update the software patch.