Live › vulnerability › CVE-2024-1212
Go to dashboardProgress Kemp LoadMaster load balancers contain an OS command injection flaw in the management interface. An unauthenticated remote attacker can run arbitrary system commands on the appliance.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Progress Kemp LoadMaster | vendor | – | – |
| progress loadmaster | vendor | >= 7.2.48.1, < 7.2.48.10 | 7.2.48.10 |
| progress loadmaster | vendor | >= 7.2.54.0, < 7.2.54.8 | 7.2.54.8 |
| progress loadmaster | vendor | >= 7.2.55.0, < 7.2.59.2 | 7.2.59.2 |
Unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Progress Kemp LoadMaster contains an OS command injection vulnerability that allows an unauthenticated, remote attacker to access the system through the LoadMaster management interface, enabling arbitrary system command execution.
CISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
This page as .md · .json · in your agent: get_signal("CVE-2024-1212")
CISA KEV catalog, Creative Commons 0 · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.