CVE-2005-2773

hp openview network node manager

Published 2 Sept 2005 · updated 16 Jun 2026 · Analyzed

9.8 Critical · CVSS 3.1, NVD

Exploited in the wild

CISA added this to its Known Exploited Vulnerabilities catalog on 25 Mar 2022, with a remediation deadline of 15 Apr 2022 for US federal agencies.

Required action: Apply updates per vendor instructions.

Description

HP OpenView Network Node Manager 6.2 through 7.50 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) node parameter to connectedNodes.ovpl, (2) cdpView.ovpl, (3) freeIPaddrs.ovpl, and (4) ecscmg.ovpl.

References

marc.info/?l=bugtraq&m=112499121725662&w=2 · Exploit, Issue Tracking, Mailing List
secunia.com/advisories/16555/ · Not Applicable
www.securityfocus.com/advisories/9150 · Broken Link
www.securityfocus.com/bid/14662 · Broken Link
exchange.xforce.ibmcloud.com/vulnerabilities/21999 · Third Party Advisory
www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2005-2773 · US Government Resource