« Volver al listado

CVE-2010-1550

Estado: ModificadaAlta (10)—

Format string vulnerability in ovet_demandpoll.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via format string specifiers in the sel parameter.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

HP — Openview Network Node Manager

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2010-1550",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 10,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "hp-security-alert@hp.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2010-05-13T17:30:02.267",
  "references": [
    {
      "url": "http://marc.info/?l=bugtraq&m=127360750704351&w=2",
      "source": "hp-security-alert@hp.com"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/511245/100/0/threaded",
      "source": "hp-security-alert@hp.com"
    },
    {
      "url": "http://zerodayinitiative.com/advisories/ZDI-10-081/",
      "source": "hp-security-alert@hp.com"
    },
    {
      "url": "http://marc.info/?l=bugtraq&m=127360750704351&w=2",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/511245/100/0/threaded",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://zerodayinitiative.com/advisories/ZDI-10-081/",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-134"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Format string vulnerability in ovet_demandpoll.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via format string specifiers in the sel parameter."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de formato de cadena en ovet_demandpoll.exe en HP OpenView Network Node Manager (OV NNM) 7.01, 7.51 y 7.53 permite a atacantes remotos ejecutar código de su elección a través de especificadores de formato de cadenas en el parámetros \"sel\"."
    }
  ],
  "lastModified": "2026-06-16T23:18:36.040",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:hp:openview_network_node_manager:7.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6C89F2AB-45CF-4455-920F-396852C862E0"
            },
            {
              "criteria": "cpe:2.3:a:hp:openview_network_node_manager:7.51:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F5CC1E39-5607-41A9-8BBE-A51F1AC9D5CB"
            },
            {
              "criteria": "cpe:2.3:a:hp:openview_network_node_manager:7.51:-:hp-ux:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6692E05F-4864-449F-8A52-9001028D8C44"
            },
            {
              "criteria": "cpe:2.3:a:hp:openview_network_node_manager:7.51:-:linux:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2A40F2C6-AFF9-4D63-ACD0-A9D37160BA3D"
            },
            {
              "criteria": "cpe:2.3:a:hp:openview_network_node_manager:7.51:-:solaris:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FC1DA299-A180-4078-9172-67D116840D29"
            },
            {
              "criteria": "cpe:2.3:a:hp:openview_network_node_manager:7.51:-:windows:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FED610E9-7639-48FE-8B4F-B394A7EEC7C9"
            },
            {
              "criteria": "cpe:2.3:a:hp:openview_network_node_manager:7.53:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A3A4986C-97B8-4382-AC4B-55E22C6BAE62"
            },
            {
              "criteria": "cpe:2.3:a:hp:openview_network_node_manager:7.53:-:hp-ux:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C1935DA4-A1AF-4867-BCB1-F5BB75360702"
            },
            {
              "criteria": "cpe:2.3:a:hp:openview_network_node_manager:7.53:-:linux:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "769ED1A5-C3C5-404E-8040-655D69C2AA88"
            },
            {
              "criteria": "cpe:2.3:a:hp:openview_network_node_manager:7.53:-:solaris:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "186EFE05-AC1C-48FF-91B7-0CCD49FEABCC"
            },
            {
              "criteria": "cpe:2.3:a:hp:openview_network_node_manager:7.53:-:windows:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D5CE1F56-FA80-416D-8F42-C1C291F0965C"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "hp-security-alert@hp.com"
}