CVE-2009-2685: HP Power Manager

High severity, CVSS 10.0. EPSS: 76.7% chance of exploitation in the next 30 days.

Stack-based buffer overflow in the login form in the management web server in HP Power Manager allows remote attackers to execute arbitrary code via the Login variable.

Affected products

• HP Power Manager: any version

Published 2009-11-06. Last modified 2026-06-16.