seclists.org
http://seclists.org/fulldisclosure/2025/Jul/17 CVE-2025-54767
MEDIUM
KL-001-2025-014: Xorux LPAR2RRD Read Only User Denial of Service
Record summary
CVE-2025-54767 has a selected CVSS score of 6.5 (medium).
Description
An authenticated, read-only user can kill any processes running on the Xormon Original virtual appliance as the lpar2rrd user.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationPoC
AutomatableNo
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Jul 29, 2025 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
LPAR2RRDBrowse Xorux / LPAR2RRDDefault status: affected | CVE List | 8.04 | affected |
References
4korelogic.comThird-party advisory
https://korelogic.com/Resources/Advisories/KL-001-2025-014.txt lpar2rrd.comrelease notes
https://lpar2rrd.com/note800.php nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2025-54767