Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
CVE-2005-2773 Details
Description
HP OpenView Network Node Manager 6.2 through 7.50 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) node parameter to connectedNodes.ovpl, (2) cdpView.ovpl, (3) freeIPaddrs.ovpl, and (4) ecscmg.ovpl.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Feb 7, 2025Exploitation: ActiveAutomatable: YesTechnical Impact: Total
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2005-2773 | CISA-ADP | US Government Resource |
| http://marc.info/?l=bugtraq&m=112499121725662&w=2 | CVE | ExploitIssue TrackingMailing List |
| http://secunia.com/advisories/16555/ | CVE | Not Applicable |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/21999 | CVE | Third Party Advisory |
| http://www.securityfocus.com/advisories/9150 | CVE | Broken Link |
| http://www.securityfocus.com/bid/14662 | CVE | Broken Link |
| http://marc.info/?l=bugtraq&m=112499121725662&w=2 | [email protected] | ExploitIssue TrackingMailing List |
| http://secunia.com/advisories/16555/ | [email protected] | Not Applicable |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/21999 | [email protected] | Third Party Advisory |
| http://www.securityfocus.com/advisories/9150 | [email protected] | Broken Link |
| http://www.securityfocus.com/bid/14662 | [email protected] | Broken Link |
This CVE is in CISA's Known Exploited Vulnerabilities Catalog
Reference CISA's BOD 22-01 and Known Exploited Vulnerabilities Catalog for further guidance and requirements.
| Vulnerability Name | Date Added | Due Date | Required Action |
|---|---|---|---|
| HP OpenView Network Node Manager Remote Code Execution Vulnerability | Mar 25, 2022 | Apr 15, 2022 | Apply updates per vendor instructions. |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-77 | Improper Neutralization of Special Elements used in a Command ('Command Injection') | [email protected] |
| CWE-77 | Improper Neutralization of Special Elements used in a Command ('Command Injection') | CISA-ADP |
Affected Products
| Product | Versions |
|---|---|
| hp openview network node manager | >= 6.2, <= 7.50 |
CPE
Remediation
| |
Change History
16 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 16, 2026 | CVE Modified | [email protected] |
| Jun 16, 2026 | CVE Modified | CISA-ADP |
| Apr 16, 2026 | Modified Analysis | [email protected] |
| Apr 16, 2026 | [email protected] | |
| Oct 22, 2025 | CVE Modified | CISA-ADP |
| Oct 21, 2025 | CVE Modified | CISA-ADP |
| Oct 21, 2025 | CVE Modified | CISA-ADP |
| Mar 14, 2025 | Modified Analysis | [email protected] |
| Feb 7, 2025 | CVE Modified | CISA-ADP |
| Jan 15, 2025 | Modified Analysis | [email protected] |
| Nov 21, 2024 | CVE Modified | CVE |
| Jul 16, 2024 | Modified Analysis | [email protected] |
| May 14, 2024 | CVE Modified | [email protected] |
| Jul 11, 2017 | CVE Modified | [email protected] |
| Oct 18, 2016 | CVE Modified | [email protected] |
| Sep 6, 2005 | Initial Analysis | [email protected] |