How severe is CVE-2014-2624?

CVE-2014-2624 has a CVSS 2.0 base score of 10.0, rated critical severity.

Is CVE-2014-2624 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 65% (99th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2014-2624?

CVE-2014-2624 primarily affects Hp Network Node Manager I. In total, 3 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2014-2624?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.

When was CVE-2014-2624 published?

CVE-2014-2624 was published on 2014-09-11 and last updated on 2026-06-17.

CVE-2014-2624

CVE-2014-2624 is a critical-severity vulnerability in Hp Network Node Manager I with a CVSS 2.0 base score of 10.0. Its EPSS exploit-prediction score of 65% places it in the 99th percentile, indicating an elevated likelihood of exploitation.

Key facts

Severity: Critical (CVSS 2.0 base score 10.0)
EPSS exploit prediction: 65% (99th percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Hp Network Node Manager I
Published: 2014-09-11
Last modified: 2026-06-17

Description

Unspecified vulnerability in HP Network Node Manager i (NNMi) 9.0x, 9.1x, and 9.2x allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-2264.

Frequently asked questions

What is CVE-2014-2624?: Unspecified vulnerability in HP Network Node Manager i (NNMi) 9.0x, 9.1x, and 9.2x allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-2264.
How severe is CVE-2014-2624?: CVE-2014-2624 has a CVSS 2.0 base score of 10.0, rated critical severity.
Is CVE-2014-2624 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 65% (99th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2014-2624?: CVE-2014-2624 primarily affects Hp Network Node Manager I. In total, 3 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-2014-2624?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.
When was CVE-2014-2624 published?: CVE-2014-2624 was published on 2014-09-11 and last updated on 2026-06-17.

References

Affected products (3)

cpe:2.3:a:hp:network_node_manager_i:9.0:*:*:*:*:*:*:*
cpe:2.3:a:hp:network_node_manager_i:9.10:*:*:*:*:*:*:*
cpe:2.3:a:hp:network_node_manager_i:9.20:*:*:*:*:*:*:*

More vulnerabilities in Hp Network Node Manager I

CVE-2013-6218 — Critical (CVSS 10.0): Unspecified vulnerability in HP Network Node Manager i (NNMi) 9.0x, 9.1x, and 9.2x allows remote attackers to execute…
CVE-2012-3275 — Critical (CVSS 10.0): Unspecified vulnerability in HP Network Node Manager i (NNMi) 9.1x and 9.20 allows remote attackers to execute…
CVE-2017-8948 — Critical (CVSS 9.8): A Remote Bypass Security Restriction vulnerability in HPE Network Node Manager i (NNMi) Software versions v10.0x,…
CVE-2016-4398 — High (CVSS 8.8): A remote arbitrary code execution vulnerability was identified in HP Network Node Manager i (NNMi) Software 10.00,…
CVE-2016-2009 — High (CVSS 8.8): HPE Network Node Manager i (NNMi) 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote authenticated users to execute…
CVE-2016-2014 — High (CVSS 8.1): HPE Network Node Manager i (NNMi) 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote authenticated users to modify…

All CVEs affecting Hp Network Node Manager I →