RCE in Itrs Group Op5 Monitor
CVE-2025-34115
An authenticated command injection vulnerability exists in OP5 Monitor through version 7.1.9 via the 'cmd_str' parameter in the command_test.php endpoint. A user with access to the web interface can exploit the 'Test this command' feature to execute arbitrary shell commands as the unprivileged web application user. The vulnerability resides in the configuration section of the application and requires valid login credentials with access to the command testing functionality. This issue is fixed in version 7.2.0.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
Published · last modified .
EPSS exploit prediction
EPSS: 0.035 (88.8th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 89th percentile — 88.8% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.033 · newest: 0.035 · change: +0.002
Affected products
- Itrs Group Op5 Monitor — versions 0
Weakness classification (CWE)
Public proof-of-concept exploits
References
- raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/l… (exploit)
- www.exploit-db.com/exploits/39676 (exploit)
- www.itrsgroup.com/products/network-monitoring-op5-monitor (product)
- www.vulncheck.com/advisories/op5-monitor-authenticated-command-execution (third-party-advisory)
- af854a3a-2127-422b-91ae-364da2661108
Frequently asked questions
- What is CVE-2025-34115?
- CVE-2025-34115 is a vulnerability in Itrs Group Op5 Monitor, classified under Improper Input Validation. Published 2025-07-15.
- Is CVE-2025-34115 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.