Critical 1 exploited CVE WID-SEC-2024-0470 1 CVE

Kemp LoadMaster: Schwachstelle ermöglicht Codeausführung

Published Feb 22, 2024 · Updated Apr 1, 2024 · Revision 2 · de-DE

Vendor: Kemp Product: LoadMaster Platform: Linux

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Kemp LoadMaster ausnutzen, um beliebigen Programmcode auszuführen.

Product

LoadMaster ist eine Load Balancer Lösung von Progress Software.

Vulnerabilities 1

Critical 10.0

CVE-2024-1212 Exploited Public exploit Scanner template EPSS 95%

LoadMaster Pre-Authenticated OS Command Injection

Unauthenticated remote attackers can access the system through the LoadMaster management interface, enabling arbitrary system command execution.

Progress Software LoadMaster

Feb 21, 2024
KEV Nov 18, 2024

Revision history

2024-04-01 #2
Exploit-Hinweis aufgenommen
2024-02-22 #1
Initiale Fassung

References

LoadMaster Security Vulnerability vom 2024-02-22
https://support.kemptechnologies.com/hc/en-us/articles/23878931058445-LoadMaster-Security-Vulnerability-CVE-2024-1212
Sonicwall Blog vom 2024-04-01
https://blog.sonicwall.com/en-us/2024/03/progress-kemp-loadmaster-unauthenticated-command-injection-vulnerability/