Veille CVE
CVE-2005-2773
9.8 Critique Exploitée activementCatalogue CISA KEV — HP OpenView Network Node Manager Remote Code Execution Vulnerability
Ajoutée le 25/03/2022 · Échéance de correction (agences US) : 15/04/2022
Action requise : Apply updates per vendor instructions.
Description
HP OpenView Network Node Manager 6.2 through 7.50 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) node parameter to connectedNodes.ovpl, (2) cdpView.ovpl, (3) freeIPaddrs.ovpl, and (4) ecscmg.ovpl.
Produits concernés
Scores CVSS
| Version | Score | Source | Vecteur |
|---|---|---|---|
| 3.1 | 9.8 Critique | nvd@nist.gov (NVD) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| 3.1 | 9.8 Critique | 134c704f-9b21-4f2e-91b3-4a467353bcc0 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| 2.0 | 7.5 Élevée | nvd@nist.gov (NVD) | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Faiblesses (CWE)
Références
- http://marc.info/?l=bugtraq&m=112499121725662&w=2 ExploitIssue TrackingMailing List
- http://secunia.com/advisories/16555/ Not Applicable
- http://www.securityfocus.com/advisories/9150 Broken Link
- http://www.securityfocus.com/bid/14662 Broken Link
- https://exchange.xforce.ibmcloud.com/vulnerabilities/21999 Third Party Advisory
- http://marc.info/?l=bugtraq&m=112499121725662&w=2 ExploitIssue TrackingMailing List
- http://secunia.com/advisories/16555/ Not Applicable
- http://www.securityfocus.com/advisories/9150 Broken Link
- http://www.securityfocus.com/bid/14662 Broken Link
- https://exchange.xforce.ibmcloud.com/vulnerabilities/21999 Third Party Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2005-2773 US Government Resource