Remote Attackers Can Execute Arbitrary System Commands via LoadMaster Management Interface
Key Information
- Vendor
- Progress Software
- Status
- Loadmaster
- Vendor
- CVE Published:
- 21 February 2024
Badges
Summary
The CVE-2024-1212 vulnerability affects Progress Kemp LoadMaster and ECS Connection Manager products, allowing unauthenticated remote attackers to execute arbitrary system commands by accessing the management interface and issuing a crafted API command. This vulnerability has a CVSS score of 10, making it critical. As of now, there have been no reports of active exploitation of this vulnerability. However, organizations using these products are urged to review their networks for the presence of the vulnerable products, refer to Progress Kemp’s advisory on CVE-2024-1212 for mitigation strategies, and apply necessary security patches to address the vulnerability.
CISA Reported
CISA provides regional cyber and physical services to support security and resilience across the United States. CISA monitor the most dangerious vulnerabilities and have identifed CVE-2024-1212 as being exploited but is not known by the CISA to be used in ransomware campaigns. This is subject to change at pace
The CISA's recommendation is: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Affected Version(s)
LoadMaster <= 7.2.48.1
LoadMaster < 7.2.48.10
LoadMaster < 7.2.54.8
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.
News Articles
GBHackers News CVE-2024-1212CISA Warns Kemp LoadMaster OS Command Injection Vulnerability Exploited in Attacks
CISA issued an urgent security advisory warning organizations about an active exploitation of a vulnerability in Progress Kemp LoadMaster.
2 weeks ago
CISA Warns of Progress Kemp LoadMaster Vulnerability Exploitation
CISA is warning organizations that CVE-2024-1212, a Kemp LoadMaster OS command injection vulnerability, is being exploited in attacks.
2 weeks ago
CISA tags Progress Kemp LoadMaster flaw as exploited in attacks
The U.S. Cybersecurity & Infrastructure Security Agency (CISA) has added three new flaws in its Known Exploited Vulnerabilities (KEV) catalog, including a critical OS command injection impacting Progress Kemp LoadMaster.
2 weeks ago
EPSS Score
94% chance of being exploited in the next 30 days.
CVSS V3.1
Timeline
- 👾
Exploit exists.
- 🔥
Vulnerability reached the number 1 worldwide trending spot.
Vulnerability started trending.
First article discovered by ctrl.co
Vulnerability published.
Vulnerability Reserved.