CVE-2005-2773
HP OpenView Network Node Manager Remote Code Execution Vulnerability
Description
CVE-2005-2773 is a critical command injection vulnerability affecting Hewlett Packard (HP) OpenView Network Node Manager. HP OpenView Network Node Manager could allow a remote attacker to execute arbitrary commands on the system. CISA has added CVE-2005-2773 to the Known Exploited Vulnerabilities catalog, confirming active exploitation in the wild. With an EPSS score of 91.21% (99.6th percentile), this vulnerability has a very high probability of being exploited.
KEV Information
CVSS Score
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HOpen in CalculatorAffected Products
| Vendor | Product | Version |
|---|---|---|
| hp | openview network node manager | >= 6.2, <= 7.50 |
Multiple CVSS Assessments
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References
- http://marc.info/?l=bugtraq&m=112499121725662&w=2(Exploit, Issue Tracking, Mailing List)
- http://secunia.com/advisories/16555/(Not Applicable)
- http://www.securityfocus.com/advisories/9150(Broken Link)
- http://www.securityfocus.com/bid/14662(Broken Link)
- https://exchange.xforce.ibmcloud.com/vulnerabilities/21999(Third Party Advisory)
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2005-2773(US Government Resource)
Weakness Type
CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')
Command Injection is a critical vulnerability that occurs when software constructs all or part of a command using externally-influenced input from an upstream component, but fails to neutralize or incorrectly neutralizes special elements that could modify the intended command when executed. This allows attackers to inject malicious commands that are executed by the underlying system with the same privileges as the vulnerable application. In the case of CVE-2005-2773, this weakness manifests in Hewlett Packard (HP) OpenView Network Node Manager where hP OpenView Network Node Manager could allow a remote attacker to execute arbitrary commands on the system.
Learn more: CWE-77 — Improper Neutralization of Special Elements used in a Command ('Command Injection')
Impact Analysis
CVE-2005-2773 poses a critical threat to organizations running Hewlett Packard (HP) OpenView Network Node Manager, with a CVSS score of 9.8 reflecting maximum impact across confidentiality, integrity, and availability. Successful exploitation can fully compromise the confidentiality, integrity, and availability of affected systems. Attackers can access sensitive data, modify system configurations or data, and disrupt service availability. The network-based attack vector requiring no authentication makes this vulnerability particularly accessible to opportunistic attackers and automated scanning tools.
Exploit Maturity
CVE-2005-2773 is listed in the CISA Known Exploited Vulnerabilities catalog, confirming real-world exploitation. The EPSS score of 91.21% (99.6th percentile) places it among the most likely vulnerabilities to be exploited, reflecting widespread and active exploitation activity. Public exploit code is available, lowering the barrier for attackers and increasing the urgency to patch. Despite being over 21 years old, this vulnerability continues to be relevant due to the persistence of unpatched legacy systems in production environments.
Remediation
- Apply vendor patches immediately as required by CISA KEV: Apply updates per vendor instructions. Update Hewlett Packard (HP) OpenView Network Node Manager to the latest available version that addresses this vulnerability.
- If immediate patching is not possible, restrict network access to the affected OpenView Network Node Manager service using firewall rules, ACLs, or network segmentation to limit exposure to trusted networks only.
- Monitor affected systems for signs of compromise by reviewing security logs for anomalous activity, unauthorized access attempts, and unexpected system changes related to OpenView Network Node Manager.
- Evaluate whether affected Hewlett Packard (HP) OpenView Network Node Manager deployments are still within vendor support. End-of-life systems should be prioritized for migration to supported alternatives.
- Review and update your organization's vulnerability management process to ensure CISA KEV entries with a remediation deadline of 2022-04-15 are addressed within the required timeframe.
Technical Details
CVE-2005-2773 is classified under CWE-77 (Improper Neutralization of Special Elements used in a Command ('Command Injection')) affecting Hewlett Packard (HP) OpenView Network Node Manager. HP OpenView Network Node Manager could allow a remote attacker to execute arbitrary commands on the system. The vulnerability is exploitable remotely over the network, with low attack complexity, requiring no prior authentication. The CVSS 3.1 base score of 9.8 (CRITICAL) reflects high confidentiality impact, high integrity impact, and high availability impact.
Frequently Asked Questions
Is CVE-2005-2773 being actively exploited?
Yes. CVE-2005-2773 is listed in the CISA Known Exploited Vulnerabilities catalog, confirming active exploitation in the wild. The EPSS score of 91.21% (99.6th percentile) indicates a very high probability of exploitation. Public exploit code is available, further increasing the risk.
What products are affected by CVE-2005-2773?
CVE-2005-2773 primarily affects Hewlett Packard (HP) OpenView Network Node Manager, as well as Hp Openview Network Node Manager. Organizations should check whether any instances of the affected software are running in their environment.
How do I fix CVE-2005-2773?
Apply updates per vendor instructions. As an interim measure, restrict network access to the affected service to trusted networks only.
How severe is CVE-2005-2773?
CVE-2005-2773 has a CVSS 3.1 score of 9.8, rated CRITICAL. This critical rating reflects the vulnerability's potential for complete system compromise. The inclusion in the CISA KEV catalog means organizations are required to remediate this vulnerability within the specified deadline.
Need Help With Vulnerability Management?
Our security experts can help you prioritize and remediate vulnerabilities effectively.