Shell Command Injection Vulnerability in XoruX LPAR2RRD and STOR2RRD by XoruX
CVE-2021-42372

8.8HIGH

Key Information:

Vendor

Xorux

Status
Lpar2rrd
Stor2rrd
Vendor
CVE Published:
8 November 2021

What is CVE-2021-42372?

A vulnerability exists in the HW Events SNMP community feature of XoruX LPAR2RRD and STOR2RRD products that allows authenticated remote attackers to execute arbitrary shell commands, potentially compromising the security of the service running these applications. This vulnerability arises due to improper validation of input, which can be exploited by attackers to gain unauthorized command execution capabilities.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://stor2rrd.com/note730.php
x_refsource_CONFIRM
https://lpar2rrd.com/note730.php
x_refsource_CONFIRM
https://github.com/orangecertcc/security-research/securit...
x_refsource_MISC

EPSS Score

23% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.