CVE-2005-2773
critical · 9.8Actively exploitedOn the CISA Known Exploited Vulnerabilities catalog
Apply updates per vendor instructions.
Added 2022-03-25Remediation due 2022-04-15
HP OpenView Network Node Manager 6.2 through 7.50 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) node parameter to connectedNodes.ovpl, (2) cdpView.ovpl, (3) freeIPaddrs.ovpl, and (4) ecscmg.ovpl.
9.8
CVSS
74.6%
EPSS (exploit prob.)
99th
EPSS percentile
2005-09-02
Published
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-77
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| hp | openview_network_node_manager | >= 6.2, <= 7.50 |
Check a specific version with /api/v1/cve/match.
References
- http://marc.info/?l=bugtraq&m=112499121725662&w=2
- http://secunia.com/advisories/16555/
- http://www.securityfocus.com/advisories/9150
- http://www.securityfocus.com/bid/14662
- https://exchange.xforce.ibmcloud.com/vulnerabilities/21999
- http://marc.info/?l=bugtraq&m=112499121725662&w=2
- http://secunia.com/advisories/16555/
- http://www.securityfocus.com/advisories/9150
- http://www.securityfocus.com/bid/14662
- https://exchange.xforce.ibmcloud.com/vulnerabilities/21999
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2005-2773
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2005-2773