Approved changes feed: RSS · Atom

cpe:2.3:a:xorux:stor2rrd:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorXorux (b3290ebf-cd31-5a29-8405-7213c4f5456f)
ProductStor2Rrd (2801b8c8-0f3a-504d-901b-d2fe1f15bd7f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-42372 vulnerable 2026-06-08 05:35:22.231890 Details available
A shell command injection in the HW Events SNMP community in XoruX LPAR2RRD and STOR2RRD before 7.30 allows authenticated remote attackers to execute arbitrary shell commands as the user running the service.
Published: 2021-11-08T04:44:21.000Z
Updated: 2024-08-04T03:30:38.239Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-42371 vulnerable 2026-06-08 05:35:22.231332 Details available
lpar2rrd is a hardcoded system account in XoruX LPAR2RRD and STOR2RRD before 7.30.
Published: 2021-11-08T04:46:24.000Z
Updated: 2024-08-04T03:30:38.368Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-42370 vulnerable 2026-06-08 05:35:22.230772 Details available
A password mismanagement situation exists in XoruX LPAR2RRD and STOR2RRD before 7.30 because cleartext information is present in HTML password input fields in the device properties. (Viewing the passwords requires configuring a web browser to display HTML password input fields.)
Published: 2021-11-08T04:49:28.000Z
Updated: 2024-08-04T03:30:38.266Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.