CVE-2025-66620
HighSummary
An unused webshell in MicroServer allows unlimited login attempts, with sudo rights on certain files and directories. An attacker with admin access to MicroServer can gain limited shell access, enabling persistence through reverse shells, and the ability to modify or remove data stored in the file system.
Risk Assessment
An attacker can gain persistent access to the system, potentially leading to confidentiality, integrity, and availability breaches.
Recommendation
Remove or disable the unused webshell and restrict administrative access to MicroServer.
Other vulnerabilities in MicroServer
Original NVD description (English source)
An unused webshell in MicroServer allows unlimited login attempts, with sudo rights on certain files and directories. An attacker with admin access to MicroServer can gain limited shell access, enabling persistence through reverse shells, and the ability to modify or remove data stored in the file system.