Xorux

Records11All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical4CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Xorux records in CISA KEV

No Xorux vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Lpar2rrd 9 records HIGH Stor2rrd 4 records MEDIUM Xormon 2 records MEDIUM

Records

4 records in Stor2rrd · all components

TI-2020-14777 CVE-2020-24032 · GHSA-m57r-h4qc-2v6g

tz.pl on XoruX LPAR2RRD and STOR2RRD 2.70 virtual appliances allows cmd=set&tz=OS command…

MEDIUM 50

tz.pl on XoruX LPAR2RRD and STOR2RRD 2.70 virtual appliances allows cmd=set&tz=OS command injection via shell metacharacters in a timezone.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.05373 Published 2020-08-18 No fix listed CWE-78

TI-2021-18786 CVE-2021-42372 · GHSA-m7rh-rr5p-5rpm

A shell command injection in the HW Events SNMP community in XoruX LPAR2RRD and STOR2RRD…

MEDIUM 47

A shell command injection in the HW Events SNMP community in XoruX LPAR2RRD and STOR2RRD before 7.30 allows authenticated remote attackers to execute arbitrary shell commands as the user running the service.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.06055 Published 2021-11-08 No fix listed CWE-78

TI-2021-18785 CVE-2021-42371 · GHSA-567p-m567-62j8

lpar2rrd is a hardcoded system account in XoruX LPAR2RRD and STOR2RRD before 7.30.

MEDIUM 45

lpar2rrd is a hardcoded system account in XoruX LPAR2RRD and STOR2RRD before 7.30.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01558 Published 2021-11-08 No fix listed CWE-922

TI-2021-18784 CVE-2021-42370 · GHSA-pv69-ph5f-43vx

A password mismanagement situation exists in XoruX LPAR2RRD and STOR2RRD before 7.30…

LOW 34

A password mismanagement situation exists in XoruX LPAR2RRD and STOR2RRD before 7.30 because cleartext information is present in HTML password input fields in the device properties.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00724 Published 2021-11-08 No fix listed CWE-312

Open these records in search →

Critical	4
High	3
Medium	4
Low	0
No CVSS	0