Unauthenticated remote attackers can access the system through the LoadMaster management interface, enabling arbitrary system command execution.

Progress Kemp LoadMaster versions 7.2.48.1 < 7.2.59.2 / 7.2.48.1 < 7.2.54.8 and 7.2.48.1 < 7.2.48.10 is affected by a vulnerability allowing an unauthenticated attacker to execute remote commands via a specially forged request.

The Progress Kemp LoadMaster running on the remote host is affected by a command injection vulnerability. An unauthenticated, remote attacker can exploit this, via specially crafted messages, to execute arbitrary commands on the appliance.

ID	Name	Product	Family	Type	Severity
114384	Progress Kemp LoadMaster Remote Command Execution	Web App Scanning	Component Vulnerability	Check Based	critical
192525	Progress Kemp LoadMaster Command Injection (CVE-2024-1212)	Nessus	CGI abuses	Remote	critical

Detections

Analytics

CVE-2024-1212

critical

Tenable Plugins

critical

critical