CVE-2011-0271 The CGI scripts in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 do not properly validate an unspecified parameter, which allows remote attackers to execute arbitrary commands by using a com...
HighCVSS 10.0
EPSS 7.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The CGI scripts in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 do not properly validate an unspecified parameter, which allows remote attackers to execute arbitrary commands by using a command string for this parameter's value, related to a "command injection vulnerability."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| HP Inc openview network node manager | = 7.51 | No fix listed |
| HP Inc openview network node manager | = 7.53 | No fix listed |
References
- 20110110 HP Network Node Manager Command Injection Vulnerability third-party-advisory
- HPSBMA02621 vendor-advisory
- 45762 vdb-entry
- 1024951 vdb-entry
- ADV-2011-0085 vdb-entry
- hp-opennnm-cgi-command-exec(64657) vdb-entry