CVE-2009-2685
HP Power Manager - Buffer Overflow
Title source: llmDescription
Stack-based buffer overflow in the login form in the management web server in HP Power Manager allows remote attackers to execute arbitrary code via the Login variable.
Exploits (3)
exploitdb
WORKING POC
VERIFIED
by Metasploit · rubyremotewindows
https://www.exploit-db.com/exploits/16785
exploitdb
WORKING POC
VERIFIED
by ryujin · pythonremotewindows
https://www.exploit-db.com/exploits/10099
metasploit
WORKING POC
NORMAL
by MC, sinn3r · rubypocwin
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/hp_power_manager_login.rb
References (8)
Scores
EPSS
0.8543
EPSS Percentile
99.4%
Details
CWE
CWE-119
Status
published
Products (1)
hp/power_manager
Published
Nov 06, 2009
Tracked Since
Feb 18, 2026