CVE-2005-2773 HP OpenView Network Node Manager 6.2 through 7.50 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) node parameter to connectedNodes.ovpl, (2) cdpView.ovpl, (3)...
CriticalCVSS 9.8
EPSS 74.4%
CISA KEV
added 2022-03-25 · due 2022-04-15
Exploited in the wild
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Exploited in the wild (confirmed)
Description
HP OpenView Network Node Manager 6.2 through 7.50 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) node parameter to connectedNodes.ovpl, (2) cdpView.ovpl, (3) freeIPaddrs.ovpl, and (4) ecscmg.ovpl.
CISA Known Exploited Vulnerability
- Date added
- 2022-03-25
- Due date (FCEB)
- 2022-04-15
- Ransomware use
- Unknown
Required action
Apply updates per vendor instructions.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| HP Inc openview network node manager | >= 6.2, <= 7.50 | No fix listed |
References
- 20050825 Portcullis Security Advisory 05-014 HP Openview Remote Command exploit issue-tracking mailing-list
- 16555 not-applicable third-party-advisory
- HPSBMA01224 broken-link vendor-advisory
- 14662 broken-link vdb-entry
- hp-openview-node-manager-command-execution(21999) third-party-advisory vdb-entry
- www.cisa.gov government-resource us-government-resource