CVE-2005-2773
Critical 9.8 Exploited in the wild (KEV)
Confirmed active exploitation — CISA KEV catalog
- Name
- HP OpenView Network Node Manager Remote Code Execution Vulnerability
- Added to catalog
- Remediation due date (US federal)
- Required action
- Apply updates per vendor instructions.
Description
HP OpenView Network Node Manager 6.2 through 7.50 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) node parameter to connectedNodes.ovpl, (2) cdpView.ovpl, (3) freeIPaddrs.ovpl, and (4) ecscmg.ovpl.
Metrics
- CVSS 3.1
-
9.8 (CRITICAL)
Score source: NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - EPSS — exploit probability
- 75% (percentile: 99) as of 1 November 2026
- CWE
- CWE-77
Affected products
hp: openview network node manager
References
- http://marc.info/?l=bugtraq&m=112499121725662&w=2 ExploitIssue TrackingMailing List
- http://marc.info/?l=bugtraq&m=112499121725662&w=2 ExploitIssue TrackingMailing List
- http://secunia.com/advisories/16555/ Not Applicable
- http://www.securityfocus.com/advisories/9150 Broken Link
- http://www.securityfocus.com/bid/14662 Broken Link
- https://exchange.xforce.ibmcloud.com/vulnerabilities/21999 Third Party Advisory
- http://secunia.com/advisories/16555/ Not Applicable
- http://www.securityfocus.com/advisories/9150 Broken Link
- http://www.securityfocus.com/bid/14662 Broken Link
- https://exchange.xforce.ibmcloud.com/vulnerabilities/21999 Third Party Advisory