Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact
10
CVSSv2

CVE-2020-24032

Published: 18/08/2020 Updated: 06/12/2022
CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10
CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9
VMScore: 890
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Summary

tz.pl on XoruX LPAR2RRD and STOR2RRD 2.70 virtual appliances allows cmd=set&tz=OS command injection via shell metacharacters in a timezone.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

xorux stor2rrd 2.7.0

xorux lpar2rrd 2.7.0

Github Repositories

https://github.com/jet-pentest/CVE-2020-24032

CVE-2020-24032 [Suggested description] tzpl on XoruX LPAR2RRD and STOR2RRD 270 virtual appliances allows cmd=set&tz=OS command injection via shell metacharacters in a timezone [VulnerabilityType Other] OS command injection [Vendor of Product] XoruX sro [Affected Product Code Base] LPAR2RRD and STOR2RRD Virtual Appliance version - 270 [Attack Type] Remote [Impact

References

CWE-78https://www.stor2rrd.com/download.phphttps://pastebin.com/dHhawgx8https://pastebin.com/G8981Fj8https://nvd.nist.govhttps://github.com/jet-pentest/CVE-2020-24032
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27802template injectionCVE-2024-0044code injectionCVE-2024-35474CVE-2024-27857CVE-2024-23251CVE-2024-23692physical
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook