CVE-2019-25065

published 2022-06-09

CVE-2019-25065: A vulnerability was found in OpenNetAdmin 18.1.1. It has been rated as critical. Affected by this issue is some unknown functionality. The manipulation leads…

Priority P1 82 critical 9.8 CVSS 3.1

AV N AC L PR N UI N S U C H I H A H

ITW EXPLOIT VulnCheck KEV Initial access

A vulnerability was found in OpenNetAdmin 18.1.1. It has been rated as critical. Affected by this issue is some unknown functionality. The manipulation leads to privilege escalation. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
opennetadmin	opennetadmin	—	—

Detection & IOCs extracted from sources · hover to see the quote

version OpenNetAdmin 8.5.14 - 18.1.1↗

• → Monitor for exploitation of the OpenNetAdmin ping command injection vulnerability (CVE-2019-25065), which involves remote command injection via the ping functionality in OpenNetAdmin versions 8.5.14 through 18.1.1. ↗
• → The vulnerability enables remote privilege escalation via manipulation of an unknown functionality endpoint, exploitable without authentication from a remote origin. ↗

• · The specific vulnerable parameter or endpoint within OpenNetAdmin's ping functionality is described as 'some unknown functionality', limiting precise filter/signature targeting without further reverse engineering. ↗

CVSS provenance

nvd v3.1 9.8 CRITICAL CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

nvd v2.0 7.5 HIGH AV:N/AC:L/Au:N/C:P/I:P/A:P

vulncheck 6.3 MEDIUM

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-78