{"schemaVersion":3,"id":"CVE-2005-2773","aliases":[],"status":"published","duplicateOf":null,"title":"HP OpenView Network Node Manager Remote Code Execution Vulnerability","description":"HP OpenView Network Node Manager 6.2 through 7.50 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) node parameter to connectedNodes.ovpl, (2) cdpView.ovpl, (3) freeIPaddrs.ovpl, and (4) ecscmg.ovpl.","dates":{"published":"2005-09-02T04:00:00.000Z","modified":"2025-10-22T00:05:57.013Z","reserved":null,"kevAdded":["2022-03-25T00:00:00.000Z"],"kevDue":["2022-04-15T00:00:00.000Z"]},"cvss":{"headline":{"score":9.8,"severity":"critical","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":9.8,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":9.8,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":7.5,"severity":"high","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.74592,"percentile":0.99499,"severity":"critical","asOf":"2026-10-21T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-21T00:00:00.000Z","baselineScore":0.74592},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.74592,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.74592,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.74592,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.74592,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.74592,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.74592,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.74592,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.74592,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.74592,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.74592,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.74592,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.74592,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.74592,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.74592,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.74592,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.74592,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.74592,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.74592,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.74592,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.74592,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.74592,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.74592,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.74592,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.74592,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.74592,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.74592,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.74592,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.74592,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.74592,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.74592,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.74592,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.74592,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.74592,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.74592,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.74592,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.74592,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.74592,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.74592,"percentile":0.99499}],"last30":[{"date":"2026-09-21T00:00:00.000Z","score":0.74592,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.74592,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.74592,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.74592,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.74592,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.74592,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.74592,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.74592,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.74592,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.74592,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.74592,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.74592,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.74592,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.74592,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.74592,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.74592,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.74592,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.74592,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.74592,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.74592,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.74592,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.74592,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.74592,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.74592,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.74592,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.74592,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.74592,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.74592,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.74592,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.74592,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.74592,"percentile":0.99499}]},"kev":{"state":"listed","entries":[{"source":"cisa","sourceLabel":"CISA","dateAdded":"2022-03-25T00:00:00.000Z","dueDate":"2022-04-15T00:00:00.000Z","requiredAction":"Apply updates per vendor instructions.","name":"HP OpenView Network Node Manager Remote Code Execution Vulnerability","description":"HP OpenView Network Node Manager could allow a remote attacker to execute arbitrary commands on the system.","notes":[{"type":"url","href":"https://nvd.nist.gov/vuln/detail/CVE-2005-2773","label":"nvd.nist.gov/vuln/detail/CVE-2005-2773"}],"vendor":"Hewlett Packard (HP)","product":"OpenView Network Node Manager","ransomware":false,"ransomwareUse":"Unknown","exploitationType":null}],"listedCount":1,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":true,"entry":{"source":"cisa","sourceLabel":"CISA","dateAdded":"2022-03-25T00:00:00.000Z","dueDate":"2022-04-15T00:00:00.000Z","requiredAction":"Apply updates per vendor instructions.","name":"HP OpenView Network Node Manager Remote Code Execution Vulnerability","description":"HP OpenView Network Node Manager could allow a remote attacker to execute arbitrary commands on the system.","notes":[{"type":"url","href":"https://nvd.nist.gov/vuln/detail/CVE-2005-2773","label":"nvd.nist.gov/vuln/detail/CVE-2005-2773"}],"vendor":"Hewlett Packard (HP)","product":"OpenView Network Node Manager","ransomware":false,"ransomwareUse":"Unknown","exploitationType":null}},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"REF_5DED489A5AA97DE0","name":"Exploit Reference (marc.info)","source":"reference","url":"http://marc.info/?l=bugtraq&m=112499121725662&w=2","maturity":"unknown","reliabilityScore":0.2,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null},{"id":"16887","name":"HP OpenView Network Node Manager (OV NNM) - 'connectedNodes.ovp'l Remote Command Execution (Metasploit)","source":"exploit-database","url":"https://www.exploit-db.com/exploits/16887","maturity":"weaponized","reliabilityScore":0.8,"verified":true,"type":"remote","platforms":["linux"],"requiresAuth":null,"exploitdb":{"verified":true,"type":"remote","platform":"linux","file":"exploits/linux/remote/16887.rb","codes":["CVE-2005-2773","OSVDB-19057"]},"metasploit":null},{"id":"1188","name":"HP OpenView Network Node Manager 7.50 - Remote Command Execution","source":"exploit-database","url":"https://www.exploit-db.com/exploits/1188","maturity":"weaponized","reliabilityScore":0.8,"verified":true,"type":"remote","platforms":["multiple"],"requiresAuth":null,"exploitdb":{"verified":true,"type":"remote","platform":"multiple","file":"exploits/multiple/remote/1188.c","codes":["OSVDB-19057","CVE-2005-2773"]},"metasploit":null},{"id":"MSF_EXPLOIT_UNIX_WEBAPP_OPENVIEW_CONNECTEDNODES_EXEC","name":"HP Openview connectedNodes.ovpl Remote Command Execution","source":"metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploit/unix/webapp/openview_connectednodes_exec.rb","maturity":"weaponized","reliabilityScore":1,"verified":true,"type":"remote","platforms":[],"requiresAuth":false,"exploitdb":null,"metasploit":{"fullname":"exploit/unix/webapp/openview_connectednodes_exec","rank":"600","rankName":"excellent","postAuth":false,"check":false,"stability":["unknown-stability"],"sideEffects":["unknown-side-effects"],"reliability":["unknown-reliability"]}}],"exploitCount":4,"weaknesses":[{"id":"CWE-77","name":"Improper Neutralization of Special Elements used in a Command ('Command Injection')","description":"The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.","type":"weakness","status":"Draft","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/77.html"}],"affected":[{"vendor":"hp","product":"openview_network_node_manager","name":"openview network node manager","label":"openview_network_node_manager","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 6.2, ≤ 7.50","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 6.2, ≤ 7.50","eol":null,"hubHref":"/vendor/hp/openview_network_node_manager"}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"http://marc.info/?l=bugtraq&m=112499121725662&w=2","label":"marc.info?l=bugtraq&m=112499121725662&w=2","hostname":"marc.info","tags":["Mailing List","X Refsource BUGTRAQ","Exploit","Issue Tracking"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/21999","label":"exchange.xforce.ibmcloud.com/vulnerabilities/21999","hostname":"exchange.xforce.ibmcloud.com","tags":["VDB Entry","X Refsource XF","Third Party Advisory"]},{"url":"http://www.securityfocus.com/advisories/9150","label":"www.securityfocus.com/advisories/9150","hostname":"www.securityfocus.com","tags":["Vendor Advisory","X Refsource HP","Broken Link"]},{"url":"http://www.securityfocus.com/bid/14662","label":"www.securityfocus.com/bid/14662","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID","Broken Link"]},{"url":"http://secunia.com/advisories/16555/","label":"secunia.com/advisories/16555/","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Not Applicable"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2005-2773","label":"www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2005-2773","hostname":"www.cisa.gov","tags":["Government Resource","US Government Resource"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2005-09-02T04:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"kev-added","date":"2022-03-25T00:00:00.000Z","label":"Added to CISA KEV","detail":"HP OpenView Network Node Manager Remote Code Execution Vulnerability","source":"cisa"},{"kind":"kev-due","date":"2022-04-15T00:00:00.000Z","label":"CISA remediation due","detail":"Apply updates per vendor instructions.","source":"cisa"},{"kind":"modified","date":"2025-10-22T00:05:57.013Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":85,"level":"critical","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T21:08:37.112Z","stale":false,"partial":false}}