CVE-2009-2685

HP Power Manager - Buffer Overflow

Title source: llm

Description

Stack-based buffer overflow in the login form in the management web server in HP Power Manager allows remote attackers to execute arbitrary code via the Login variable.

Exploits (3)

exploitdb WORKING POC VERIFIED
by Metasploit · rubyremotewindows
https://www.exploit-db.com/exploits/16785
exploitdb WORKING POC VERIFIED
by ryujin · pythonremotewindows
https://www.exploit-db.com/exploits/10099
metasploit WORKING POC NORMAL
by MC, sinn3r · rubypocwin
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/hp_power_manager_login.rb

Scores

EPSS 0.8543
EPSS Percentile 99.4%

Details

CWE
CWE-119
Status published
Products (1)
hp/power_manager
Published Nov 06, 2009
Tracked Since Feb 18, 2026