Hewlett Packard (HP) · OpenView Network Node Manager

CVE-2005-2773

HP OpenView Network Node Manager Remote Code Execution Vulnerability

Exploited in attacks Critical 9.8 Attack chance: 75%

What it is

HP OpenView Network Node Manager 6.2 through 7.50 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) node parameter to connectedNodes.ovpl, (2) cdpView.ovpl, (3) freeIPaddrs.ovpl, and (4) ecscmg.ovpl.

CISA: HP OpenView Network Node Manager could allow a remote attacker to execute arbitrary commands on the system.

What to do

Apply updates per vendor instructions.

Deadline for US federal agencies: April 15, 2022

Added to the CISA list: March 25, 2022
Published: September 2, 2005
Severity: Critical 9.8 CVSS 3.1
Chance of attacks in the next 30 days (EPSS): 75% in the top 0.5% of all known vulnerabilities
More details: NVD · CVE.org · CISA

All references (6)

More exploited flaws from Hewlett Packard (HP)

Added	Vulnerability	Product	Severity	Attack chance
Mar 25, 2022	HP Multiple Products Remote Code ExecutionCVE-2013-4810	ProCurve Manager (PCM), PCM+, Identity Driven Manager (IDM), and Application Lifecycle Management	Critical 9.8	79%

All of them →

Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.