Critical severity · published Sep 2, 2005
CVE-2005-2773
HP OpenView Network Node Manager Remote Code Execution Vulnerability
In wildKEV
9.8
CVSS
74.6%
EPSS
Yes
On KEV
Description
HP OpenView Network Node Manager 6.2 through 7.50 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) node parameter to connectedNodes.ovpl, (2) cdpView.ovpl, (3) freeIPaddrs.ovpl, and (4) ecscmg.ovpl.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)74.6% · higher than 99% of CVEs
Exploited in the wildYes
CISA KEVListed Mar 25, 2022
Federal remediation dueApr 15, 2022
Ransomware campaign useNot known
Affected products
Which versions
ON
Openview Network Node Manager · HP
6.2 through 7.50 · source: NVD, KEV
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-2773
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-2773
CISA KEV catalogue
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
mailing-list
http://marc.info/?l=bugtraq&m=112499121725662&w=2
vdb-entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/21999
vendor-advisory
http://www.securityfocus.com/advisories/9150
vdb-entry
http://www.securityfocus.com/bid/14662
third-party-advisory
http://secunia.com/advisories/16555/
More from Openview Network Node Manager
–
CVE-2011-3167
Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1210
–
CVE-2011-3166
Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1209
–
CVE-2011-3165
Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1208
–
CVE-2011-0271
The CGI scripts in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 do not properly validate an unspecified parameter, which allows remote attackers to execute arbitrary…
–
CVE-2011-0270
Format string vulnerability in nnmRptConfig.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via format string…