Unscored severity · published Jan 13, 2011
CVE-2011-0271
The CGI scripts in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 do not properly validate an unspecified parameter, which allows remote attackers to execute arbitrary…
–
CVSS
7.3%
EPSS
No
On KEV
Description
The CGI scripts in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 do not properly validate an unspecified parameter, which allows remote attackers to execute arbitrary commands by using a command string for this parameter's value, related to a "command injection vulnerability."
Exploitation
Is it being used?
Exploit prediction (EPSS)7.3% · higher than 94% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ON
Openview Network Node Manager · HP
7.51; 7.53 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-0271
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-0271
labs.idefense.com
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=887
www.securityfocus.com
http://www.securityfocus.com/archive/1/515628
www.securityfocus.com
http://www.securityfocus.com/bid/45762
www.securitytracker.com
http://www.securitytracker.com/id?1024951
www.vupen.com
http://www.vupen.com/english/advisories/2011/0085
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/64657
More from Openview Network Node Manager
9.8
CVE-2005-2773
HP OpenView Network Node Manager Remote Code Execution Vulnerability
–
CVE-2011-3167
Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1210
–
CVE-2011-3166
Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1209
–
CVE-2011-3165
Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1208
–
CVE-2011-0270
Format string vulnerability in nnmRptConfig.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via format string…