CVE-2011-0271

EUVD-2011-0297
The CGI scripts in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 do not properly validate an unspecified parameter, which allows remote attackers to execute arbitrary commands by using a command string for this parameter's value, related to a "command injection vulnerability."
OS Command Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
10 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:C/I:C/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 96%
Affected Products (NVD)
VendorProductVersion
hpopenview_network_node_manager
7.51
hpopenview_network_node_manager
7.53
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=887
http://www.securityfocus.com/archive/1/515628
http://www.securityfocus.com/bid/45762
http://www.securitytracker.com/id?1024951
http://www.vupen.com/english/advisories/2011/0085
https://exchange.xforce.ibmcloud.com/vulnerabilities/64657
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=887
http://www.securityfocus.com/archive/1/515628
http://www.securityfocus.com/bid/45762
http://www.securitytracker.com/id?1024951
http://www.vupen.com/english/advisories/2011/0085
https://exchange.xforce.ibmcloud.com/vulnerabilities/64657