CVEvulnerability

CVE-2005-2773

9.8 CRITICAL Known exploited Published 2005-09-02 Modified 2026-06-16 Official page ↗

CISA Known Exploited Vulnerability

HP OpenView Network Node Manager Remote Code Execution Vulnerability — Hewlett Packard (HP) OpenView Network Node Manager

HP OpenView Network Node Manager could allow a remote attacker to execute arbitrary commands on the system.

Added to KEV
2022-03-25
Remediation due
2022-04-15
Ransomware use
Unknown
Required action
Apply updates per vendor instructions.
Notes
https://nvd.nist.gov/vuln/detail/CVE-2005-2773
Status
Analyzed
Published
2005-09-02
Last modified
2026-06-16
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-77

Description

HP OpenView Network Node Manager 6.2 through 7.50 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) node parameter to connectedNodes.ovpl, (2) cdpView.ovpl, (3) freeIPaddrs.ovpl, and (4) ecscmg.ovpl.

Affected configurations

• hp openview network node manager (>= 6.2 <= 7.50)

Related

Weakness · CWE (1)

  • CWE-77 Improper Neutralization of Special Elements used in a Command weakness

References