Back to feed
EUVD-2014-4896 · Published Feb 17, 2020
LPAR2RRD in 3.5 and earlier allows remote attackers to execute arbitrary commands due to insufficient input sanitization of the web GUI parameters.
Technologies
Xorux Lpar2Rrd
Weaknesses
CWE-78
CVSS scores
- v3.19.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - v2.010.0
AV:N/AC:L/Au:N/C:C/I:C/A:C
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access
References
- http://packetstormsecurity.com/files/127593/LPAR2RRD-3.5-4.53-Command-Injection.html
- http://ocert.org/advisories/ocert-2014-005.html
- http://www.lpar2rrd.com/note453-01.htm
- http://www.openwall.com/lists/oss-security/2014/07/23/6
- http://www.securityfocus.com/bid/68844
- https://exchange.xforce.ibmcloud.com/vulnerabilities/94784
Potentially impacted assets
See if this affects your attack surface
