OP5 Monitor CVE-2025-34115 Detect
| Reporter | Title | Published | Views | Family All 14 |
|---|---|---|---|---|
| CVE-2025-34115 | 15 Jul 202513:04 | – | attackerkb | |
| CVE-2025-34115 | 29 May 201815:50 | – | circl | |
| ITRS Group OP5 Monitor Security Vulnerabilities | 15 Jul 202500:00 | – | cnnvd | |
| CVE-2025-34115 | 15 Jul 202513:04 | – | cve | |
| CVE-2025-34115 OP5 Monitor <= 7.1.9 Authenticated Command Execution via command_test.php | 15 Jul 202513:04 | – | cvelist | |
| EUVD-2025-21432 | 3 Oct 202520:07 | – | euvd | |
| OP5 Monitor CVE-2025-34115 command_test RCE | 26 Oct 202617:01 | – | kittysploit | |
| op5 v7.1.9 Configuration Command Execution | 8 Apr 201600:00 | – | metasploit | |
| CVE-2025-34115 | 15 Jul 202513:15 | – | nvd | |
| OP5 Monitor <= 7.1.9 RCE Vulnerability | 7 Nov 201600:00 | – | openvas |
10
#!/usr/bin/env python3
# -*- coding: utf-8 -*-
"""Detects OP5 Monitor / ITRS login surface."""
from kittysploit import *
from lib.protocols.http.http_client import Http_client
class Module(Scanner, Http_client):
__info__ = {
"name": "OP5 Monitor CVE-2025-34115 Detect",
"description": "Detects OP5 Monitor / ITRS login surface.",
"author": ["KittySploit Team"],
"severity": "critical",
"cve": ["CVE-2025-34115"],
"tags": ["scanner", "web", "op5", "cve-2025-34115"],
"references": ["https://nvd.nist.gov/vuln/detail/CVE-2025-34115"],
"agent": {
"risk": "active",
"effects": ["network_probe"],
"expected_requests": 2,
"reversible": True,
"approval_required": False,
"produces": ["tech_hints", "endpoints", "risk_signals"],
"chain": {
"suggested_followups": ["exploits/multi/http/op5_monitor_cve_2025_34115_rce"],
},
},
}
def run(self):
r = self.http_request("GET", "/monitor/", allow_redirects=True)
body = (r.text or "").lower() if r else ""
if "op5" in body or "itrs" in body or "monitor" in body:
self.set_info(severity="critical", cve="CVE-2025-34115", reason="OP5/ITRS monitor UI hint", confidence="low")
return True
return False
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
26 Oct 2026 17:01Current
5.8Medium risk
Vulners AI Score5.8
CVSS 48.7
EPSS0.03448
SSVC