{"id":"CVE-2005-2773","aliases":["EUVD-2005-2774","GHSA-xqgm-4493-f736"],"status":"published","title":"HP OpenView Network Node Manager 6.2 through 7.50 allows remote attackers to execute arbitrary...","description":"HP OpenView Network Node Manager 6.2 through 7.50 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) node parameter to connectedNodes.ovpl, (2) cdpView.ovpl, (3) freeIPaddrs.ovpl, and (4) ecscmg.ovpl.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.74592,"percentile":0.99501,"model":"v2026.06.15"},"facts":{"in_kev":true,"known_exploited":true,"public_exploit":true,"fix_available":false},"cwes":["CWE-77"],"published":"2005-09-02T04:00:00Z","modified":"2026-06-16T22:15:39Z","kev":{"date_added":"2022-03-25","due_date":"2022-04-15","required_action":"Apply updates per vendor instructions.","known_ransomware_use":"Unknown"},"exploitation":[{"source":"euvd","since":"2022-03-25"},{"source":"kev","since":"2022-03-25"}],"exploits":[{"source":"metasploit","id":"exploit/unix/webapp/openview_connectednodes_exec","title":"HP Openview connectedNodes.ovpl Remote Command Execution","type":"exploit","platform":"Unix","date":"2005-08-25","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/unix/webapp/openview_connectednodes_exec"},{"source":"exploitdb","id":"EDB-1188","title":"HP OpenView Network Node Manager 7.50 - Remote Command Execution","type":"remote","platform":"multiple","date":"2005-08-30","verified":true,"url":"https://www.exploit-db.com/exploits/1188"},{"source":"exploitdb","id":"EDB-16887","title":"HP OpenView Network Node Manager (OV NNM) - 'connectedNodes.ovp'l Remote Command Execution (Metasploit)","type":"remote","platform":"linux","date":"2010-07-03","verified":true,"url":"https://www.exploit-db.com/exploits/16887"}],"products":[{"vendor":"hewlett packard (hp)","product":"openview network node manager"},{"vendor":"hp","product":"openview_network_node_manager"}],"references":[{"url":"http://marc.info/?l=bugtraq\u0026m=112499121725662\u0026w=2","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","Exploit","Issue Tracking","Mailing List"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/21999","tags":["vdb-entry","x_refsource_XF","x_transferred","Third Party Advisory"]},{"url":"http://www.securityfocus.com/advisories/9150","tags":["vendor-advisory","x_refsource_HP","x_transferred","Broken Link"]},{"url":"http://www.securityfocus.com/bid/14662","tags":["vdb-entry","x_refsource_BID","x_transferred","Broken Link"]},{"url":"http://secunia.com/advisories/16555/","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Not Applicable"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2005-2773","tags":["government-resource","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-2773"},{"url":"http://secunia.com/advisories/16555"},{"url":"https://github.com/advisories/GHSA-xqgm-4493-f736"}],"sources":{"cve":[{"id":"CVE-2005-2773","description":"HP OpenView Network Node Manager 6.2 through 7.50 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) node parameter to connectedNodes.ovpl, (2) cdpView.ovpl, (3) freeIPaddrs.ovpl, and (4) ecscmg.ovpl.","status":"published","published":"2005-09-02T04:00:00Z","modified":"2025-10-22T00:05:57.013Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"adp"}],"cwes":["CWE-77"],"updated_at":"2026-11-02T14:33:38.187792Z"}],"euvd":[{"id":"EUVD-2005-2774","description":"HP OpenView Network Node Manager 6.2 through 7.50 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) node parameter to connectedNodes.ovpl, (2) cdpView.ovpl, (3) freeIPaddrs.ovpl, and (4) ecscmg.ovpl.","status":"published","published":"2005-09-02T04:00:00Z","modified":"2025-10-22T00:05:57Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"exploited_since":"2022-03-25","updated_at":"2026-11-02T19:49:38.726368Z"}],"ghsa":[{"id":"GHSA-xqgm-4493-f736","title":"HP OpenView Network Node Manager 6.2 through 7.50 allows remote attackers to execute arbitrary...","description":"HP OpenView Network Node Manager 6.2 through 7.50 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) node parameter to connectedNodes.ovpl, (2) cdpView.ovpl, (3) freeIPaddrs.ovpl, and (4) ecscmg.ovpl.","status":"published","published":"2022-05-01T02:11:36Z","modified":"2025-10-22T03:31:02Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-77"],"updated_at":"2026-11-02T15:04:09.266545Z"}],"kev":[{"id":"CVE-2005-2773","title":"HP OpenView Network Node Manager Remote Code Execution Vulnerability","description":"HP OpenView Network Node Manager could allow a remote attacker to execute arbitrary commands on the system.","kev":{"date_added":"2022-03-25","due_date":"2022-04-15","required_action":"Apply updates per vendor instructions.","known_ransomware_use":"Unknown"},"updated_at":"2026-11-02T17:00:16.541131Z"}],"nvd":[{"id":"CVE-2005-2773","description":"HP OpenView Network Node Manager 6.2 through 7.50 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) node parameter to connectedNodes.ovpl, (2) cdpView.ovpl, (3) freeIPaddrs.ovpl, and (4) ecscmg.ovpl.","status":"published","published":"2005-09-02T23:03:00Z","modified":"2026-06-16T22:15:39.213Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-77"],"updated_at":"2026-11-02T14:00:56.902692Z"}]}}