CVE-2010-2703: hp openview_network_node_manager

CVSS: 10.0v2.0HighModified

Published 27-07-2010Last modified 07-08-2024

Vulnerability summary

CVE-2010-2703 is a high (CVSS 10.0) vulnerability in hp openview_network_node_manager. EPSS estimates a 71.38% chance of exploitation in the next 30 days, higher than 99.4% of scored vulnerabilities. 3 public exploits are recorded.

Overall risk

90/100

0100

Critical · default modelHow is this calculated?

CVSS score

10.0/10

010

High · v2.0 (NVD)

EPSS score

71.38%

0%100%

Critical · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits3exploit-database, metasploit

Timeline

27-07-2010
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

Stack-based buffer overflow in the execvp_nc function in the ov.dll module in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53, when running on Windows, allows remote attackers to execute arbitrary code via a long HTTP request to webappmon.exe.

CVSS metrics

1 score · 1 source · 1 version

v2.010.0

EPSS trend

Probability

71.38%

Chance of exploitation in the next 30 days

Percentile

99%

Versus all other CVEs

30-day change

0.00 pp

From 71.38% on 21-09-2026

21-09-202621-10-2026

EPSS score

71.38%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

3 found

exploit-databasedoswindowsVerified
HP OpenView Network Node Manager (OV NNM) - 'webappmon.exe execvp_nc' Remote Code Execution
Maturity: poc
exploit-databaseremotewindowsVerified
HP Network Node Manager (NMM) - CGI 'webappmon.exe execvp' Remote Buffer Overflow (Metasploit)
Maturity: weaponized
MetasploitremoteVerified
HP OpenView Network Node Manager execvp_nc Buffer Overflow
exploit/windows/http/hp_nnm_webappmon_execvp
Maturity: weaponized