Description
Unauthenticated remote attackers can access the system through the LoadMaster management interface, enabling arbitrary system command execution.
Metrics
CVSS 3.1 9.8/10
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| Progress Software | LoadMaster | >= 7.2.48.1, < 7.2.48.10; >= 7.2.54.0, < 7.2.54.8; >= 7.2.55.0, < 7.2.59.2 |
| kemptechnologies | loadmaster | >= 7.2.48.1, < 7.2.48.10; >= 7.2.54.0, < 7.2.54.8; >= 7.2.55.0, < 7.2.59.2 |
| kemptechnologies | loadmaster | >= 7.2.48.1, < 7.2.48.10; >= 7.2.54.0, < 7.2.54.8; >= 7.2.55.0, < 7.2.59.2 |
| kemptechnologies | loadmaster | >= 7.2.48.1, < 7.2.48.10; >= 7.2.54.0, < 7.2.54.8; >= 7.2.55.0, < 7.2.59.2 |
References
- https://freeloadbalancer.com/Product
- https://kemptechnologies.com/Product
- https://support.kemptechnologies.com/hc/en-us/articles/23878931058445-LoadMaster-Security-Vulnerability-CVE-2024-1212Not Applicable
- https://support.kemptechnologies.com/hc/en-us/articles/24325072850573-Release-Notice-LMOS-7-2-59-2-7-2-54-8-7-2-48-10-CVE-2024-1212Release Notes
- https://freeloadbalancer.com/Product
- https://kemptechnologies.com/Product
- https://support.kemptechnologies.com/hc/en-us/articles/23878931058445-LoadMaster-Security-Vulnerability-CVE-2024-1212Not Applicable
- https://support.kemptechnologies.com/hc/en-us/articles/24325072850573-Release-Notice-LMOS-7-2-59-2-7-2-54-8-7-2-48-10-CVE-2024-1212Release Notes
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-1212US Government Resource
Timeline
- Published
- Feb 21, 2024
- Last modified
- Jul 13, 2026
- Added to CISA KEV
- Nov 18, 2024
- NVD status
- Analyzed