CVE-2005-2773

HP OpenView Network Node Manager allowed remote attackers to execute arbitrary commands due to an unpatched vulnerability.

This unpatched remote code execution flaw in HP OpenView Network Node Manager enabled attackers to run arbitrary commands on the system, posing a severe risk to network management infrastructure. DIB organizations must ensure all legacy and enterprise management software is patched, as unpatched CVEs are a primary compliance failure under NIST 800-171. The vulnerability was actively exploited in the wild, demonstrating the critical need for continuous patch management.

Shame score — The vendor failed to patch a known, actively exploited vulnerability in a network management product, leading to potential system compromise and demonstrating severe negligence in maintaining software security.