HP OpenView Network Node Manager 6.2 through 7.50 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) node parameter to connectedNodes.ovpl, (2) cdpView.ovpl, (3) freeIPaddrs.ovpl, and (4) ecscmg.ovpl.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Openview_network_node_manager | Hp | 6.2 (including) | 6.2 (including) |
| Openview_network_node_manager | Hp | 6.4 (including) | 6.4 (including) |
| Openview_network_node_manager | Hp | 6.10 (including) | 6.10 (including) |
| Openview_network_node_manager | Hp | 6.31 (including) | 6.31 (including) |
| Openview_network_node_manager | Hp | 6.41 (including) | 6.41 (including) |
| Openview_network_node_manager | Hp | 7.0.1 (including) | 7.0.1 (including) |
| Openview_network_node_manager | Hp | 7.50 (including) | 7.50 (including) |