{"id":"CVE-2005-2773","kind":"vulnerability","aliases":["CVE-2005-2773"],"related":[],"title":"Hewlett Packard (HP) OpenView Network Node Manager: HP OpenView Network Node Manager Remote Code Execution Vulnerability","description":"HP OpenView Network Node Manager 6.2 through 7.50 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) node parameter to connectedNodes.ovpl, (2) cdpView.ovpl, (3) freeIPaddrs.ovpl, and (4) ecscmg.ovpl.","summary":"HP OpenView Network Node Manager has a remote code execution flaw that lets a remote attacker run arbitrary commands on the server. CISA lists it as actively exploited in the wild.","severity":"critical","cvss":9.8,"epss":0.74592,"exploited":true,"exploited_at":"2022-03-25T00:00:00+00:00","products":[{"name":"Hewlett Packard (HP) OpenView Network Node Manager","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["exploited","hp-openview","infrastructure","network-node-manager","self-hosted"],"not_affected_if":["not-installed"],"how_to_check":null,"fix":"Apply the vendor updates per HP instructions (CISA required action); exact fixed version unknown.","status":"open","published_at":"2005-09-02T23:03:00+00:00","first_seen_at":"2026-10-23T19:11:52+00:00","triaged_at":"2026-10-23T21:21:58+00:00","updated_at":"2026-10-23T21:57:35+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-10-23T21:21:58Z","model":"claude-haiku-5-5","output":{"fix":"Apply the vendor updates per HP instructions (CISA required action); exact fixed version unknown.","reach":"network","impact":"high","summary":"HP OpenView Network Node Manager has a remote code execution flaw that lets a remote attacker run arbitrary commands on the server. CISA lists it as actively exploited in the wild.","category":"infrastructure","who_cares":["hp-openview","network-node-manager","self-hosted"],"confidence":0.6,"needs_auth":"unknown","worst_case":"Remote attacker runs arbitrary commands on the management server","analyst_note":"Find the affected and fixed HP OpenView NNM versions and the HP advisory from the CISA KEV entry or NVD; confirm exposed component and check method.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":["not-installed"],"user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000451,"input_tokens":2849,"output_tokens":332,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2005':18A,21A '-2773':19A,22A '1':93C '2':98C '3':100C '4':103C '6.2':78C '7.50':80C 'activ':68B 'allow':81C 'arbitrari':59B,86C 'attack':57B,83C 'cdpview.ovpl':99C 'cisa':64B 'code':14A,50B 'command':60B,87C 'connectednodes.ovpl':97C 'cve':17A,20A 'ecscmg.ovpl':104C 'execut':15A,51B,85C 'exploit':30B,69B 'flaw':52B 'freeipaddrs.ovpl':101C 'hewlett':1A,23A 'host':41B 'hp':3A,8A,25A,32B,42B,73C 'hp-openview':31B 'infrastructur':34B 'let':54B 'list':65B 'manag':7A,12A,38B,46B,77C 'manager':29A 'metacharact':90C 'network':5A,10A,27A,36B,44B,75C 'network-node-manag':35B 'node':6A,11A,28A,37B,45B,76C,94C 'openview':4A,9A,26A,33B,43B,74C 'packard':2A,24A 'paramet':95C 'remot':13A,49B,56B,82C 'run':58B 'self':40B 'self-host':39B 'server':63B 'shell':89C 'via':88C 'vulner':16A 'wild':72B","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2005-09-02T23:03:00+00:00","kev":{"dateAdded":"2022-03-25","dueDate":"2022-04-15","requiredAction":"Apply updates per vendor instructions.","knownRansomwareCampaignUse":"Unknown"},"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss_by":"nvd@nist.gov","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2005-2773","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2005-2773","severity":null,"published_at":"2022-03-25T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:52+00:00","fetched_at":"2026-10-25T19:35:25+00:00","note":null},{"source":"epss","external_id":"CVE-2005-2773","url":"https://api.first.org/data/v1/epss?cve=CVE-2005-2773","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-23T19:13:44+00:00","fetched_at":"2026-10-23T19:13:44+00:00","note":null},{"source":"nvd","external_id":"CVE-2005-2773","url":"https://nvd.nist.gov/vuln/detail/CVE-2005-2773","severity":null,"published_at":"2005-09-02T23:03:00+00:00","modified_at":"2026-06-16T22:15:39+00:00","first_seen_at":"2026-10-23T21:57:35+00:00","fetched_at":"2026-10-23T21:57:35+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}