VULNERABILITY INTELLIGENCE
CVE-2009-3845
CVSS score10 HIGH
EPSS probability21.95%
CISA KEVNot currently listed
Published2009-12-10
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Description
The port-3443 HTTP server in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary commands via shell metacharacters in the hostname parameter to unspecified Perl scripts.
Primary references
- hp-security-alert@hp.com — Patch, Vendor Advisory
- hp-security-alert@hp.com
- hp-security-alert@hp.com
- hp-security-alert@hp.com
- hp-security-alert@hp.com
- hp-security-alert@hp.com
- hp-security-alert@hp.com
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108