CVE-2008-2438: HP OpenView Network Node Manager

High severity, CVSS 10.0. EPSS: 11.4% chance of exploitation in the next 30 days.

Integer overflow in ovalarmsrv.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via a crafted command to TCP port 2954, which triggers a heap-based buffer overflow.

Affected products

• HP OpenView Network Node Manager: version 7.01 only; version 7.51 only; version 7.53 only

Published 2009-04-28. Last modified 2026-06-16.