9.8crit
CVE-2005-2773KEVin critical feed3 exploits
HP OpenView Network Node Manager 6.2 through 7.50 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1)…
Published 21 y ago · modified 4 mo ago · JSON
CVSS
9.8
v3.1 · CNA
CISA KEV
Yes
added 2022-03-25
EPSS
74.6%
percentile 100%
Public exploits
3
Metasploit · Exploit-DB
Summary
HP OpenView Network Node Manager 6.2 through 7.50 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) node parameter to connectedNodes.ovpl, (2) cdpView.ovpl, (3) freeIPaddrs.ovpl, and (4) ecscmg.ovpl.
Known exploited (CISA KEV)
- Added
- 4 y ago
- Due date
- 2022-04-15 (4 y ago)
- Ransomware use
- Unknown
- Required action
- Apply updates per vendor instructions.
- Vendor / product
- Hewlett Packard (HP) / OpenView Network Node Manager
- CISA name
- HP OpenView Network Node Manager Remote Code Execution Vulnerability
CISA SSVC assessment
- Exploitation
- Active — exploited in the wild
- Automatable
- yes
- Technical impact
- total
- Assessed
- 20 mo ago
Exploit prediction (EPSS)
74.59% probability of exploitation in the next 30 days, higher than 100% of all scored CVEs.
Exploits and detections
- Metasploit exploit/unix/webapp/openview_connectednodes_exec HP Openview connectedNodes.ovpl Remote Command Execution · metasploit exploit, excellent rank · 2005-08-25
- EDB-16887 HP OpenView Network Node Manager (OV NNM) - 'connectedNodes.ovp'l Remote Command Execution (Metasploit) · remote · 2010-07-03
- EDB-1188 HP OpenView Network Node Manager 7.50 - Remote Command Execution · remote · 2005-08-30
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| CISA ADP | 3.1 | 9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| NVD | 3.1 | 9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| CNA | 3.1 | 9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| NVD | 2.0 | 7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Classification
- Weakness
- CWE-77 Improper Neutralization of Special Elements used in a Command
References
- marc.info /?l=bugtraq&m=112499121725662&w=2 · mailing-list, x_refsource_BUGTRAQ, x_transferred
- exchange.xforce.ibmcloud.com /vulnerabilities/21999 · vdb-entry, x_refsource_XF, x_transferred
- securityfocus.com /advisories/9150 · vendor-advisory, x_refsource_HP, x_transferred
- securityfocus.com /bid/14662 · vdb-entry, x_refsource_BID, x_transferred
- secunia.com /advisories/16555/ · third-party-advisory, x_refsource_SECUNIA, x_transferred
- cisa.gov /known-exploited-vulnerabilities-catalog?field_cve=CVE-2005-2773 · government-resource
Sources
- CVE List: CVE-2005-2773
- NVD: CVE-2005-2773
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.