CVE-2011-0266: HP OpenView Network Node Manager nnmRptConfig.exe buffer overflow

Automated analysis

Generated by VULONE's analysis model from the NVD record, CISA KEV and EPSS data on 19 September 2026. Confidence: high.

critical priorityCVSS 2.0 base score of 10 with network reachability, no authentication, and full confidentiality, integrity, and availability impact.

What it is

A buffer overflow exists in nnmRptConfig.exe in HP OpenView Network Node Manager 7.51 and 7.53, reachable through a long nameParams parameter. It is a distinct issue from CVE-2011-0267.2. Successful exploitation allows remote code execution on the affected server.

Impact

An unauthenticated remote attacker can execute arbitrary code with the privileges of the affected service, giving full control of the NNM host.

Attack surface

Reached over the network via the nnmRptConfig.exe component; the CVSS vector AV:N/AC:L/Au:N indicates no authentication and no user interaction are required.

Exploitation

Not listed in CISA KEV and no ransomware usage is documented; EPSS is high at roughly 0.70 (99th percentile), and references include a Zero Day Initiative advisory, indicating public technical detail exists.

What to do

• Apply the HP patch for NNM 7.51/7.53 addressing nnmRptConfig.exe, or upgrade to a supported NNM version.
• Restrict network access to the NNM web and CGI interfaces to trusted management hosts only.
• Run the NNM service under a least-privilege account to limit post-exploitation impact.
• Monitor vendor advisories for this product line, which is legacy and no longer broadly supported.

Detection

• Inspect HTTP requests to nnmRptConfig.exe for abnormally long nameParams values.
• Alert on unexpected child processes spawned by the NNM web server or CGI handler.
• Review NNM host logs for crashes or restarts of nnmRptConfig.exe.

This assessment is produced automatically and is not human-reviewed. Verify against the vendor advisory before acting on it.