Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2010-4113

29
FAUCET Score

CVE-2010-4113 describes a stack-based buffer overflow vulnerability in HP Power Manager (HPPM) versions prior to 4.3.2. This flaw allows unauthenticated remote attackers to execute arbitrary code by sending an excessively long 'Login' variable to the management web server. With a CVSS score of 9.3, this vulnerability is critical, indicating a network-based attack with high impact on confidentiality, integrity, and availability, though it requires medium attack complexity. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this decade-old vulnerability.

Impacted Technologies

VendorProductVersion(s)CPE
<= 4.2.9CPE matchmatch criteria
cpe:2.3:a:hp:power_manager:*:*:*:*:*:*:*:*
4.2.5CPE matchmatch criteria
cpe:2.3:a:hp:power_manager:4.2.5:*:*:*:*:*:*:*
4.2.6CPE matchmatch criteria
cpe:2.3:a:hp:power_manager:4.2.6:*:*:*:*:*:*:*
4.2.7CPE matchmatch criteria
cpe:2.3:a:hp:power_manager:4.2.7:*:*:*:*:*:*:*
4.2.8CPE matchmatch criteria
cpe:2.3:a:hp:power_manager:4.2.8:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 2.0

9.3HIGH

AV:N/AC:M/Au:N/C:C/I:C/A:C

Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Exploitability Score
8.6
Impact Score
10.0
CvssVersion
2.0

Exploit Intelligence

EPSS Score
9.72%
Probability of exploitation in next 30 days
EPSS Percentile
95.0%
Percentile rank of EPSS score among Peer Group
As of 2026-07-24
Model: v2026.06.15
This CVE's current EPSS score of 0.0972 is in the 75th percentile among its peer group of 8,914 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Vendor Patches (4)

fuji_electricvendor investigatingvia llm_extracted
langgeniusvendor investigatingvia llm_extracted
lizardbytevendor investigatingvia llm_extracted
opensipsvendor investigatingvia llm_extracted

Vendor Advisories (4)

langgeniusllm-langgenius-ae7a90960fde6bb1HIGH

HP Power Manager Management Server Login Form URL Parameter Buffer Overflow

Dec 15, 2010
lizardbytellm-lizardbyte-dcfd182f23a82e17HIGH

HP Power Manager Management Server Login Form URL Parameter Buffer Overflow

Dec 15, 2010
opensipsllm-opensips-dfeea0918a0874ffHIGH

HP Power Manager Management Server Login Form URL Parameter Buffer Overflow

Dec 15, 2010
fuji_electricllm-fuji_electric-1702f206bddc1a8eHIGH

HP Power Manager Management Server Login Form URL Parameter Buffer Overflow

Dec 15, 2010

References

marc.info
Vendor Advisory
secunia.com / advisories/42644
Vendor Advisory
securitytracker.com / id
zerodayinitiative.com / advisories/ZDI-10-292