CVE-2021-42372
High
Description
A shell command injection in the HW Events SNMP community in XoruX LPAR2RRD and STOR2RRD before 7.30 allows authenticated remote attackers to execute arbitrary shell commands as the user running the service.
SeverityHigh
CVSS8.8
Exploit probability—
ProductXorux Lpar2rrd
PublishedNov 8, 2021
First seenNov 8, 2021
How to fix
Update
- xorux lpar2rrd7.30 or later
- xorux stor2rrd7.30 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| xorux lpar2rrd | v < 7.30 | 7.30 |
| xorux stor2rrd | v < 7.30 | 7.30 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.