Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CVE Vulnerability Details :
CVE-2024-1212
PUBLISHED
Known KEV
More InfoOfficial Page
Assigner-ProgressSoftware
Assigner Org ID-f9fea0b6-671e-4eea-8fde-31911902ae05
View Known Exploited Vulnerability (KEV) details
Published At-21 Feb, 2024 | 17:39
Updated At-30 Jul, 2025 | 01:37
Rejected At-
▼CVE Numbering Authority (CNA)
LoadMaster Pre-Authenticated OS Command Injection

Unauthenticated remote attackers can access the system through the LoadMaster management interface, enabling arbitrary system command execution.

Affected Products
Vendor
Progress Software CorporationProgress Software
Product
LoadMaster
Modules
  • LoadMaster Management Interface
Platforms
  • Linux
Default Status
affected
Versions
Affected
  • From 7.2.48.1 before 7.2.48.10 (semver)
  • From 7.2.54.0 before 7.2.54.8 (semver)
  • From 7.2.55.0 before 7.2.59.2 (semver)
Problem Types
TypeCWE IDDescription
CWECWE-78CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Metrics
VersionBase scoreBase severityVector
3.110.0CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Metrics Other Info
Impacts
CAPEC IDDescription
CAPEC-113CAPEC-113 API Manipulation
CAPEC-115CAPEC-115 Authentication Bypass
CAPEC-88CAPEC-88 OS Command Injection
Solutions
Configurations
Workarounds
Exploits
Credits
finder
Rhino Security Labs
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://kemptechnologies.com/
product
https://freeloadbalancer.com/
product
https://support.kemptechnologies.com/hc/en-us/articles/24325072850573-Release-Notice-LMOS-7-2-59-2-7-2-54-8-7-2-48-10-CVE-2024-1212
vendor-advisory
https://support.kemptechnologies.com/hc/en-us/articles/23878931058445-LoadMaster-Security-Vulnerability-CVE-2024-1212
vendor-advisory
▼Authorized Data Publishers (ADP)
1. CVE Program Container
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://kemptechnologies.com/
product
x_transferred
https://freeloadbalancer.com/
product
x_transferred
https://support.kemptechnologies.com/hc/en-us/articles/24325072850573-Release-Notice-LMOS-7-2-59-2-7-2-54-8-7-2-48-10-CVE-2024-1212
vendor-advisory
x_transferred
https://support.kemptechnologies.com/hc/en-us/articles/23878931058445-LoadMaster-Security-Vulnerability-CVE-2024-1212
vendor-advisory
x_transferred
2. CISA ADP Vulnrichment
Affected Products
Vendor
Kempkemptechnologies
Product
loadmaster
CPEs
  • cpe:2.3:a:kemptechnologies:loadmaster:*:*:*:*:*:*:*:*
Default Status
unknown
Versions
Affected
  • From 7.2.48.1 before 7.2.48.10 (custom)
  • From 7.2.54.0 before 7.2.54.8 (custom)
  • From 7.2.55.0 before 7.2.59.2 (custom)
Vendor
Kempkemptechnologies
Product
loadmaster
CPEs
  • cpe:2.3:a:kemptechnologies:loadmaster:*:*:*:*:*:*:*:*
Default Status
unknown
Versions
Affected
  • From 7.2.48.1 before 7.2.48.10 (custom)
  • From 7.2.54.0 before 7.2.54.8 (custom)
  • From 7.2.55.0 before 7.2.59.2 (custom)
Vendor
Kempkemptechnologies
Product
loadmaster
CPEs
  • cpe:2.3:a:kemptechnologies:loadmaster:*:*:*:*:*:*:*:*
Default Status
unknown
Versions
Affected
  • From 7.2.48.1 before 7.2.48.10 (custom)
  • From 7.2.54.0 before 7.2.54.8 (custom)
  • From 7.2.55.0 before 7.2.59.2 (custom)
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
kev
dateAdded:
2024-11-18
reference:
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-1212
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
CVE-2024-1212 added to CISA KEV2024-11-18 00:00:00
Replaced By
Rejected Reason
References
HyperlinkResource
Details not found