Actively exploited · Published Sep 2, 2005 · Assigned by mitre

CVE-2005-2773

Critical 9.8 Exploited

In plain English

A critical-severity command injection in OpenView Network Node Manager from Hewlett Packard (HP). Attackers are actively exploiting it in the wild (listed by CISA on March 25, 2022). The chance it is exploited in the next 30 days is estimated at 74.6% (higher than 99.5% of all known vulnerabilities). Ready-made attack tooling exists: Metasploit. Apply updates per vendor instructions.

Severity (CVSS 3.1)9.8Critical

Exploit odds (30 days)74.6%top 0.5% of all CVEs

Exploited in the wildYesCISA KEV since Mar 25, 2022

Attack tooling1Metasploit

CISA guidance

Apply updates per vendor instructions.

Federal agencies must remediate by Apr 15, 2022.

Official description

HP OpenView Network Node Manager 6.2 through 7.50 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) node parameter to connectedNodes.ovpl, (2) cdpView.ovpl, (3) freeIPaddrs.ovpl, and (4) ecscmg.ovpl.

Affected products (as reported)

Vendor	Product	Versions
n/a	n/a	n/a

Weakness: CWE-77 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

20050825 Portcullis Security Advisory 05-014 HP Openview Remote Command mailing-list, x_refsource_BUGTRAQ
hp-openview-node-manager-command-execution(21999) vdb-entry, x_refsource_XF
HPSBMA01224 vendor-advisory, x_refsource_HP
14662 vdb-entry, x_refsource_BID
16555 third-party-advisory, x_refsource_SECUNIA
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2005-2773 government-resource