Vulnerabilities > Xorux > Lpar2Rrd > 5.00

DATE CVE VULNERABILITY TITLE RISK
2021-11-08 CVE-2021-42371 Insecure Storage of Sensitive Information vulnerability in Xorux Lpar2Rrd and Stor2Rrd
lpar2rrd is a hardcoded system account in XoruX LPAR2RRD and STOR2RRD before 7.30.
network
low complexity
xorux CWE-922
critical
 9.8
9.8
2021-11-08 CVE-2021-42372 OS Command Injection vulnerability in Xorux Lpar2Rrd and Stor2Rrd
A shell command injection in the HW Events SNMP community in XoruX LPAR2RRD and STOR2RRD before 7.30 allows authenticated remote attackers to execute arbitrary shell commands as the user running the service.
network
low complexity
xorux CWE-78
8.8
8.8