CVE-2025-54767

🗓️ 28 Jul 2025 23:28:27Reported by KoreLogicType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 22 Views🌐 WEB

Authenticated users can terminate processes on Xormon Original virtual appliance as lpar2rrd user

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2025-54767	29 Jul 202501:10	–	circl
CNNVD	XORUX LPAR2RRD 安全漏洞	29 Jul 202500:00	–	cnnvd
Cvelist	CVE-2025-54767 KL-001-2025-014: Xorux LPAR2RRD Read Only User Denial of Service	28 Jul 202523:28	–	cvelist
EUVD	EUVD-2025-22953	3 Oct 202520:07	–	euvd
KoreLogic Security	Xorux LPAR2RRD Read Only User Denial of Service	28 Jul 202500:00	–	korelogic
NVD	CVE-2025-54767	29 Jul 202500:15	–	nvd
OSV	CVE-2025-54767	29 Jul 202500:15	–	osv
Packet Storm	📄 Xorux LPAR2RRD 8.04 Denial of Service	29 Jul 202500:00	–	packetstorm
Positive Technologies	PT-2025-31157 · Unknown · Xormon Original	28 Jul 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-54767	30 Jul 202523:40	–	redhatcve

NVD

Node

xorux lpar2rrdRange≤8.04

[
  {
    "defaultStatus": "affected",
    "platforms": [
      "Linux"
    ],
    "product": "LPAR2RRD",
    "vendor": "Xorux",
    "versions": [
      {
        "status": "affected",
        "version": "8.04"
      }
    ]
  }
]

Source	Link
lpar2rrd	www.lpar2rrd.com/note800.php
korelogic	www.korelogic.com/Resources/Advisories/KL-001-2025-014.txt
seclists	www.seclists.org/fulldisclosure/2025/Jul/17

Parameter	Position	Path	Description	CWE
cmd	query param	/lpar2rrd-cgi/reporter.sh	Authenticated, read-only user can terminate processes on the appliance via the reporter.sh endpoint using a stop command with a PID.	CWE-648
pid	query param	/lpar2rrd-cgi/reporter.sh	Authenticated, read-only user can terminate processes on the appliance via the reporter.sh endpoint using a stop command with a PID.	CWE-648

17 Jun 2026 09:40Current

6.6Medium risk

Vulners AI Score6.6

CVSS 3.16.5

EPSS0.04957

SSVC

CWE-648