Vulnerability record · CVE-2010-1555 · published 13 May 2010
CVE-2010-1555: HP OpenView Network Node Manager getnnmdata.exe stack buffer overflow
Hp · Openview Network Node Manager
getnnmdata.exe in HP OpenView Network Node Manager 7.01, 7.51 and 7.53 contains a stack-based buffer overflow reached through an invalid Hostname parameter. Because the flaw is remotely reachable without authentication and yields full code execution, it is a serious pre-auth risk for any exposed NNM deployment.
Description
Stack-based buffer overflow in getnnmdata.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via an invalid Hostname parameter.
AV:N/AC:L/Au:N/C:C/I:C/A:C
Automated analysis
critical priorityUnauthenticated remote code execution with a CVSS 2.0 score of 10 and high EPSS probability makes this an urgent exposure for any internet- or network-reachable NNM 7.x host.
What it is
getnnmdata.exe in HP OpenView Network Node Manager 7.01, 7.51 and 7.53 contains a stack-based buffer overflow reached through an invalid Hostname parameter. Because the flaw is remotely reachable without authentication and yields full code execution, it is a serious pre-auth risk for any exposed NNM deployment.
Impact
A remote attacker can execute arbitrary code with the privileges of the getnnmdata.exe process, giving full compromise of confidentiality, integrity and availability on the host.
Attack surface
The vector is network-reachable (AV:N) with low complexity and no authentication (Au:N), and the description indicates no user interaction is required; the attacker only needs to send a request carrying a malformed Hostname parameter to the affected executable.
Exploitation
The record shows no CISA KEV listing and no reference tags indicating a public exploit, though EPSS is high at roughly 0.62 (99th percentile), suggesting elevated predicted exploitation activity.
What to do
- Apply the HP patch for the affected NNM versions (7.01, 7.51, 7.53) or upgrade to a supported release.
- Restrict network access to getnnmdata.exe and the NNM management interfaces to trusted hosts only.
- Validate or reject malformed Hostname parameters at the perimeter and in any proxy or filter in front of NNM.
- Monitor HP advisories for this issue and retire or isolate end-of-life NNM 7.x installations.
Detection
- Inspect NNM and web server logs for requests to getnnmdata.exe containing unusually long or malformed Hostname parameters.
- Alert on getnnmdata.exe process crashes or unexpected child processes spawned by it.
- Hunt for anomalous outbound connections or command execution originating from the NNM host.
This assessment is produced automatically and is not human-reviewed. Verify against the vendor advisory before acting on it.
Affected products
1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.
References
Track CVE-2010-1555 inside VULONE
Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.
Related vulnerabilities
Same products first, then exploited flaws of the same weakness class.
Source: NIST National Vulnerability Database (record CVE-2010-1555), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.
