CVE-2024-1212

CRITICALCVSS 10.0Known Exploited

CISA Known Exploited Vulnerability

https://community.progress.com/s/article/Release-Notice-LMOS-7-2-59-2-7-2-54-8-7-2-48-10-CVE-2024-1212 ; https://nvd.nist.gov/vuln/detail/CVE-2024-1212

Remediation deadline: December 9, 2024

Description

Progress Kemp LoadMaster contains an OS command injection vulnerability that allows an unauthenticated, remote attacker to access the system through the LoadMaster management interface, enabling arbitrary system command execution.

Timeline

Published:February 21st, 2024 6:15 PM

Last modified:July 13th, 2026 7:49 PM

Added to KEV:November 18th, 2024

CVSS Scoring

CVSS v3: 10.0 (CRITICAL)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Affected Software

From NVD CPE configuration data

Vendors

progress

Products

loadmaster

Weaknesses (CWE)

CWE-78

References & Reports

Advisories, patches, and third-party reports

https://freeloadbalancer.com/Product
https://kemptechnologies.com/Product
https://support.kemptechnologies.com/hc/en-us/articles/23878931058445-LoadMaster-Security-Vulnerability-CVE-2024-1212Not Applicable
https://support.kemptechnologies.com/hc/en-us/articles/24325072850573-Release-Notice-LMOS-7-2-59-2-7-2-54-8-7-2-48-10-CVE-2024-1212Release Notes
https://freeloadbalancer.com/Product
https://kemptechnologies.com/Product
https://support.kemptechnologies.com/hc/en-us/articles/23878931058445-LoadMaster-Security-Vulnerability-CVE-2024-1212Not Applicable
https://support.kemptechnologies.com/hc/en-us/articles/24325072850573-Release-Notice-LMOS-7-2-59-2-7-2-54-8-7-2-48-10-CVE-2024-1212Release Notes
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-1212US Government Resource

Source: NIST NVD · Data may lag official sources by up to one minute