Remote Code Execution Vulnerability in HP Network Node Manager i

CVE-2014-2624

What is CVE-2014-2624?

HP Network Node Manager i (NNMi) versions 9.0x, 9.1x, and 9.2x have a vulnerability that enables remote attackers to execute arbitrary code through unspecified vectors, leading to potential system compromise and unauthorized access. Users are advised to apply available patches to mitigate this risk.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

Metasploit exploit module for CVE-2014-2624
Created by Rapid7

References