Vulnerabilities

TI-2021-18784 CVE-2021-42370 · GHSA-pv69-ph5f-43vx

A password mismanagement situation exists in XoruX LPAR2RRD and STOR2RRD before 7.30…

LOW 34

A password mismanagement situation exists in XoruX LPAR2RRD and STOR2RRD before 7.30 because cleartext information is present in HTML password input fields in the device properties.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00724 Published 2021-11-08 No fix listed CWE-312

TI-2021-18785 CVE-2021-42371 · GHSA-567p-m567-62j8

lpar2rrd is a hardcoded system account in XoruX LPAR2RRD and STOR2RRD before 7.30.

MEDIUM 45

lpar2rrd is a hardcoded system account in XoruX LPAR2RRD and STOR2RRD before 7.30.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01558 Published 2021-11-08 No fix listed CWE-922

TI-2021-18786 CVE-2021-42372 · GHSA-m7rh-rr5p-5rpm

A shell command injection in the HW Events SNMP community in XoruX LPAR2RRD and STOR2RRD…

MEDIUM 47

A shell command injection in the HW Events SNMP community in XoruX LPAR2RRD and STOR2RRD before 7.30 allows authenticated remote attackers to execute arbitrary shell commands as the user running the service.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.06055 Published 2021-11-08 No fix listed CWE-78

TI-2020-14777 CVE-2020-24032 · GHSA-m57r-h4qc-2v6g

tz.pl on XoruX LPAR2RRD and STOR2RRD 2.70 virtual appliances allows cmd=set&tz=OS command…

MEDIUM 50

tz.pl on XoruX LPAR2RRD and STOR2RRD 2.70 virtual appliances allows cmd=set&tz=OS command injection via shell metacharacters in a timezone.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.05373 Published 2020-08-18 No fix listed CWE-78

Vulnerabilities

Filters

A password mismanagement situation exists in XoruX LPAR2RRD and STOR2RRD before 7.30…

lpar2rrd is a hardcoded system account in XoruX LPAR2RRD and STOR2RRD before 7.30.

A shell command injection in the HW Events SNMP community in XoruX LPAR2RRD and STOR2RRD…

tz.pl on XoruX LPAR2RRD and STOR2RRD 2.70 virtual appliances allows cmd=set&tz=OS command…