CVE-2006-5782: radexecd.exe in HP OpenView Client Configuraton Manager (CCM) does not require authentication before execut...

Security readout for executives and security teams

HP OpenView Client Configuration Manager exposed a service that could execute local CCM tools without authentication. A remote attacker could trigger disruptive actions such as rebooting a device or creating files. This is mainly a legacy-management-platform risk, but it can matter if old CCM components remain reachable. Exposure is most likely in legacy environments still running HP OpenView Client Configuration Manager with radexecd.exe reachable over a network. The bundle does not identify exact affected versions or CPEs, so asset discovery is required. Treat this as a high-priority legacy exposure check, not an internet-wide emergency based on current evidence. If CCM is still deployed, isolate it and confirm vendor guidance because unauthenticated remote control of management tooling can disrupt operations. Mitigation focus: Review HP advisory HPSBMA02167 for vendor-supported updates or workarounds.; Restrict network access to CCM and radexecd hosts to trusted management networks.; Disable or remove HP OpenView CCM components where no longer required..

Prepared

Jun 29, 2026, 09:26 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.