CVE-2009-3848: HP OpenView Network Node Manager

High severity, CVSS 10.0. EPSS: 11.8% chance of exploitation in the next 30 days.

Stack-based buffer overflow in nnmRptConfig.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via a long Template parameter, related to the vsprintf function.

Affected products

• HP OpenView Network Node Manager: version 7.0.1 only; version 7.51 only; version 7.53 only

Published 2009-12-10. Last modified 2026-06-16.