CVE-2005-2773: HP OpenView Network Node Manager Remote Code Execution Vulnerability

Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2022-03-25. EPSS: 74.6% chance of exploitation in the next 30 days.

HP OpenView Network Node Manager 6.2 through 7.50 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) node parameter to connectedNodes.ovpl, (2) cdpView.ovpl, (3) freeIPaddrs.ovpl, and (4) ecscmg.ovpl.

Affected products

• HP OpenView Network Node Manager: from 6.2, up to and including 7.50

Published 2005-09-02. Last modified 2026-06-16.