CVE-2005-2773
HP OpenView Network Node Manager Remote Code Execution Vulnerability
Published Sep 2, 2005 · updated Jun 16, 2026 · hp openview network node manager
HP OpenView Network Node Manager 6.2 through 7.50 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) node parameter to connectedNodes.ovpl, (2) cdpView.ovpl, (3) freeIPaddrs.ovpl, and (4) ecscmg.ovpl.
Timeline
Detection, updates, and resolution for this record.
Sep 2, 2005 · Catalog
Detected
HP OpenView Network Node Manager 6.2 through 7.50 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) node parameter to connectedNodes.ovpl, (2) cdpView.ovpl, (3) freeIPaddrs.ovpl, and (4) ecscmg.ovpl.
Mar 25, 2022 · CISA KEV
Known exploited
Apply updates per vendor instructions.
Apr 15, 2022 · CISA KEV
Remediation due
Apply updates per vendor instructions.
Jun 16, 2026 · Catalog
Updated
HP OpenView Network Node Manager 6.2 through 7.50 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) node parameter to connectedNodes.ovpl, (2) cdpView.ovpl, (3) freeIPaddrs.ovpl, and (4) ecscmg.ovpl.
Required action
Apply updates per vendor instructions.
CISA due date Apr 15, 2022
Affected
- cpe hp/openview network node managerversion unspecified
- vendor Hewlett Packard (HP) OpenView Network Node Managerversion unspecified
Sources
- CISA KEVCVE-2005-2773
HP OpenView Network Node Manager could allow a remote attacker to execute arbitrary commands on the system.
cisa.gov - CVE.orgCVE-2005-2773
Official CVE identifier
cve.org - FIRST EPSSCVE-2005-2773
30-day exploitation probability 74.6%
first.org - Exploit Database1188
Public archive entry. The exploit body is not stored here.
exploit-db.com - Exploit Database16887
Public archive entry. The exploit body is not stored here.
exploit-db.com - Metasploit Modulesexploit_unix/webapp/openview_connectednodes_exec
Public module reference (excellent). Module source is not copied into this catalog.
rapid7.com - NIST NVDCVE-2005-2773
HP OpenView Network Node Manager 6.2 through 7.50 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) node parameter to connectedNodes.ovpl, (2) cdpView.ovpl, (3) freeIPaddrs.ovpl, and (4) ecscmg.ovpl.
nvd.nist.gov