HIGH🇬🇧 English

CVE-2025-54769

CVSS 8.8v3.1pub. 2025-07-29upd. 2025-11-03

An authenticated, read-only user can upload a file and perform a directory traversal to have the uploaded file placed in a location of their choosing. This can be used to overwrite existing PERL modules within the application to achieve remote code execution (RCE) by an attacker.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

  • Xorux Lpar2rrd

    APP
    Xorux
    ≤ 8.04
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
RCEPath Traversal
CWE
Referencje

Powiązane podatności

CVE-2021-42371CRITICAL9.8ten sam produkt

lpar2rrd is a hardcoded system account in XoruX LPAR2RRD and STOR2RRD before 7.30.

CVE-2020-24032CRITICAL9.8ten sam produkt

tz.pl on XoruX LPAR2RRD and STOR2RRD 2.70 virtual appliances allows cmd=set&tz=OS command injection via shell ...

CVE-2014-4981CRITICAL9.8ten sam produkt

LPAR2RRD in 3.5 and earlier allows remote attackers to execute arbitrary commands due to insufficient input sa...

CVE-2014-4982CRITICAL9.8ten sam produkt

LPAR2RRD ≤ 4.53 and ≤ 3.5 has arbitrary command injection on the application server.

CVE-2021-42370HIGH7.5ten sam produkt

A password mismanagement situation exists in XoruX LPAR2RRD and STOR2RRD before 7.30 because cleartext informa...

CVE-2025-54769 — HIGH 8.8 | CVEbaza.pl