---
id: "CVE-2005-2773"
kind: "vulnerability"
aliases: ["CVE-2005-2773"]
title: "Hewlett Packard (HP) OpenView Network Node Manager: HP OpenView Network Node Manager Remote Code Execution Vulnerability"
severity: "critical"
cvss: 9.8
epss: 0.74592
exploited: true
status: "open"
category: "infrastructure"
products: [{"name": "Hewlett Packard (HP) OpenView Network Node Manager", "fixed": [], "affected": "", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["exploited", "hp-openview", "infrastructure", "network-node-manager", "self-hosted"]
not_affected_if: ["not-installed"]
published_at: "2005-09-02T23:03:00+00:00"
first_seen_at: "2026-10-23T19:11:52+00:00"
updated_at: "2026-10-23T21:57:35+00:00"
sources: [{"source": "kev", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2005-2773", "first_seen_at": "2026-10-23T19:11:52+00:00"}, {"source": "epss", "url": "https://api.first.org/data/v1/epss?cve=CVE-2005-2773", "first_seen_at": "2026-10-23T19:13:44+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2005-2773", "first_seen_at": "2026-10-23T21:57:35+00:00"}]
---

# Hewlett Packard (HP) OpenView Network Node Manager: HP OpenView Network Node Manager Remote Code Execution Vulnerability

HP OpenView Network Node Manager has a remote code execution flaw that lets a remote attacker run arbitrary commands on the server. CISA lists it as actively exploited in the wild.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Hewlett Packard (HP) OpenView Network Node Manager affected ? fixed ?

## Fix

Apply the vendor updates per HP instructions (CISA required action); exact fixed version unknown.

## Timeline

- 2026-10-23T19:11:52+00:00 kev https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2005-2773
- 2026-10-23T19:13:44+00:00 epss https://api.first.org/data/v1/epss?cve=CVE-2005-2773
- 2026-10-23T21:57:35+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2005-2773

## From the sources

HP OpenView Network Node Manager 6.2 through 7.50 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) node parameter to connectedNodes.ovpl, (2) cdpView.ovpl, (3) freeIPaddrs.ovpl, and (4) ecscmg.ovpl.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_