Xorux Stor2rrd — known CVE vulnerabilities

Every CVE whose affected-product data names Xorux Stor2rrd, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2020-24032 — CVSS 9.8 (critical): tz.pl on XoruX LPAR2RRD and STOR2RRD 2.70 virtual appliances allows cmd=set&tz=OS command injection via shell metacharacters in a timezone.
• CVE-2021-42371 — CVSS 9.8 (critical): lpar2rrd is a hardcoded system account in XoruX LPAR2RRD and STOR2RRD before 7.30.
• CVE-2021-42372 — CVSS 8.8 (high): A shell command injection in the HW Events SNMP community in XoruX LPAR2RRD and STOR2RRD before 7.30 allows authenticated remote attackers…
• CVE-2021-42370 — CVSS 7.5 (high): A password mismanagement situation exists in XoruX LPAR2RRD and STOR2RRD before 7.30 because cleartext information is present in HTML…