Approved changes feed: RSS · Atom
cpe:2.3:a:xorux:lpar2rrd:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Xorux (b3290ebf-cd31-5a29-8405-7213c4f5456f) |
|---|---|
| Product | Lpar2Rrd (fb41dfd8-9d5b-5bb8-a9c1-d7b6aacea14b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-54769 |
vulnerable | 2026-06-08 07:33:13.185921 |
KL-001-2025-016: Xorux LPAR2RRD File Upload Directory Traversal
An authenticated, read-only user can upload a file and perform a directory traversal to have the uploaded file placed in a location of their choosing. This can be used to overwrite existing PERL modules within the application to achieve remote code execution (RCE) by an attacker.
Published: 2025-07-28T23:34:38.972Z
Updated: 2025-11-03T20:06:37.868Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-54768 |
vulnerable | 2026-06-08 07:33:13.185432 |
KL-001-2025-015: Xorux LPAR2RRD Read Only User Log Download Exposing Sensitive Information
An API endpoint that should be limited to web application administrators is hidden from, but accessible by, lower-level read only web application users. The endpoint can be used to download logs from the appliance configuration, exposing sensitive information.
Published: 2025-07-28T23:31:09.836Z
Updated: 2025-11-03T20:06:36.441Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-54767 |
vulnerable | 2026-06-08 07:33:13.184893 |
KL-001-2025-014: Xorux LPAR2RRD Read Only User Denial of Service
An authenticated, read-only user can kill any processes running on the Xormon Original virtual appliance as the lpar2rrd user.
Published: 2025-07-28T23:28:27.996Z
Updated: 2025-11-03T20:06:35.060Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-42372 |
vulnerable | 2026-06-08 05:35:22.231868 |
Details available
A shell command injection in the HW Events SNMP community in XoruX LPAR2RRD and STOR2RRD before 7.30 allows authenticated remote attackers to execute arbitrary shell commands as the user running the service.
Published: 2021-11-08T04:44:21.000Z
Updated: 2024-08-04T03:30:38.239Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-42371 |
vulnerable | 2026-06-08 05:35:22.231190 |
Details available
lpar2rrd is a hardcoded system account in XoruX LPAR2RRD and STOR2RRD before 7.30.
Published: 2021-11-08T04:46:24.000Z
Updated: 2024-08-04T03:30:38.368Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-42370 |
vulnerable | 2026-06-08 05:35:22.229946 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-4982 |
vulnerable | 2026-06-08 05:05:46.558049 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-4981 |
vulnerable | 2026-06-08 05:05:46.557585 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.