CVE-2008-4562

critical HPE
CVSS v3 Base Score
10.0
AV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS Score
5.6%
Exploitation probability in 30 days
Top 10% most likely to be exploited
Attack Characteristics
Attack Vector
Network
Attack Complexity
Low
Confidentiality
C
Integrity
C
Availability
C
Published: February 8, 2009 (6303 days ago)
Last Modified: April 23, 2026
Vendor: HPE
Source: NVD

Description

Buffer overflow in the ovlaunch CGI program in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 on Windows allows remote attackers to execute arbitrary code via a crafted Host parameter. NOTE: this issue may be partially covered by CVE-2009-0205.

CWE

CWE-119

Affected Products

hp openview network node manager

References

🔗 h20000.www2.hp.com 🔗 labs.idefense.com 🔗 h20000.www2.hp.com 🔗 labs.idefense.com