Vulnerability record · CVE-2010-1549 · published 7 May 2010
CVE-2010-1549: HP LoadRunner and Performance Center Agent remote code execution
Hp · Loadrunner
An unspecified vulnerability in the Agent component of HP LoadRunner and HP Performance Center before 9.50 allows remote attackers to execute arbitrary code. The record gives no detail on the underlying flaw, so the exact mechanism is unknown, but the impact is full compromise of the affected host.
Description
Unspecified vulnerability in the Agent in HP LoadRunner before 9.50 and HP Performance Center before 9.50 allows remote attackers to execute arbitrary code via unknown vectors.
AV:N/AC:L/Au:N/C:C/I:C/A:C
Automated analysis
critical priorityCVSS 10.0 with network-reachable, unauthenticated remote code execution and very high EPSS make this a top remediation priority despite thin technical detail.
What it is
An unspecified vulnerability in the Agent component of HP LoadRunner and HP Performance Center before 9.50 allows remote attackers to execute arbitrary code. The record gives no detail on the underlying flaw, so the exact mechanism is unknown, but the impact is full compromise of the affected host.
Impact
A remote, unauthenticated attacker can execute arbitrary code on the system running the vulnerable Agent, gaining full control of confidentiality, integrity and availability.
Attack surface
The flaw is reachable over the network through the Agent component, per the AV:N/AC:L/Au:N vector, so no authentication or user interaction is required. The record does not specify the port or protocol used.
Exploitation
No CISA KEV listing and no ransomware association are recorded, but a public Exploit-DB entry exists and EPSS is very high (0.77647, 99.54th percentile), indicating elevated likelihood of exploitation.
What to do
- Upgrade HP LoadRunner and HP Performance Center to version 9.50 or later as the primary fix.
- Restrict network access to the Agent service to trusted management hosts only.
- Segment or isolate LoadRunner/Performance Center Agent hosts from general user and internet-facing networks.
- Monitor vendor advisories for updated guidance since the original description lacks technical detail.
Detection
- Monitor network traffic to and from Agent service ports for unexpected external connections.
- Alert on unusual process creation or child processes spawned by the LoadRunner/Performance Center Agent.
- Review host logs for anomalous activity on systems running the affected Agent versions.
This assessment is produced automatically and is not human-reviewed. Verify against the vendor advisory before acting on it.
Affected products
2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.
References
Track CVE-2010-1549 inside VULONE
Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.
Related vulnerabilities
Same products first, then exploited flaws of the same weakness class.
Source: NIST National Vulnerability Database (record CVE-2010-1549), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.
