{"id":"CVE-2024-1212","kind":"vulnerability","aliases":["CVE-2024-1212"],"related":[],"title":"progress loadmaster: Unauthenticated remote attackers can access the system through the LoadMaster management interface, enabling…","description":"Progress Kemp LoadMaster contains an OS command injection vulnerability that allows an unauthenticated, remote attacker to access the system through the LoadMaster management interface, enabling arbitrary system command execution.\n\nCISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","summary":"Progress Kemp LoadMaster load balancers contain an OS command injection flaw in the management interface. An unauthenticated remote attacker can run arbitrary system commands on the appliance.","severity":"critical","cvss":10.0,"epss":null,"exploited":true,"exploited_at":"2024-11-18T00:00:00+00:00","products":[{"name":"Progress Kemp LoadMaster","fixed":[],"affected":"","ecosystem":"vendor"},{"name":"progress loadmaster","fixed":["7.2.48.10"],"affected":">= 7.2.48.1, < 7.2.48.10","ecosystem":"vendor"},{"name":"progress loadmaster","fixed":["7.2.54.8"],"affected":">= 7.2.54.0, < 7.2.54.8","ecosystem":"vendor"},{"name":"progress loadmaster","fixed":["7.2.59.2"],"affected":">= 7.2.55.0, < 7.2.59.2","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["appliance","exploited","infrastructure","kemp-loadmaster","load-balancer"],"not_affected_if":["no-loadmaster-deployed"],"how_to_check":null,"fix":"Apply the mitigations from the vendor per CISA's required action, or stop using the product if no mitigation is available. Exact fixed versions: unknown.","status":"open","published_at":"2024-02-21T18:15:50+00:00","first_seen_at":"2026-10-23T19:11:51+00:00","triaged_at":"2026-10-23T20:56:11+00:00","updated_at":"2026-10-23T22:29:05+00:00","category":"infrastructure","confidence":0.7,"triage":{"at":"2026-10-23T20:56:11Z","model":"claude-haiku-5-5","output":{"fix":"Apply the mitigations from the vendor per CISA's required action, or stop using the product if no mitigation is available. Exact fixed versions: unknown.","reach":"network","impact":"high","summary":"Progress Kemp LoadMaster load balancers contain an OS command injection flaw in the management interface. An unauthenticated remote attacker can run arbitrary system commands on the appliance.","category":"infrastructure","who_cares":["kemp-loadmaster","load-balancer","appliance"],"confidence":0.7,"needs_auth":"no","worst_case":"Unauthenticated attacker runs arbitrary commands on the load balancer appliance","analyst_note":"Find the vendor advisory and the affected/fixed version list for LoadMaster and any management-interface exposure check; sources give no versions.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":["no-loadmaster-deployed"],"user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"critical"},"cost_usd":0.000463,"input_tokens":2844,"output_tokens":357,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-1212':18A,21A '-2024':17A,20A 'access':7A,83C 'action':98C 'allow':77C 'appli':99C 'applianc':31B,66B 'arbitrari':61B,92C 'attack':5A,58B,81C 'balanc':39B,44B 'cisa':96C 'command':48B,63B,73C,94C 'contain':45B,70C 'cve':16A,19A 'discontinu':105C 'enabl':15A,91C 'execut':95C 'exploit':32B 'flaw':50B 'infrastructur':33B 'inject':49B,74C 'instruct':103C 'interfac':14A,54B,90C 'kemp':23A,35B,41B,68C 'kemp-loadmast':34B 'load':38B,43B 'load-balanc':37B 'loadmast':2A,12A,36B,42B,69C,88C 'loadmaster':24A,26A,28A,30A 'manag':13A,53B,89C 'mitig':100C,111C 'os':47B,72C 'per':101C 'product':109C 'progress':1A,22A,25A,27A,29A,40B,67C 'remot':4A,57B,80C 'requir':97C 'run':60B 'system':9A,62B,85C,93C 'unauthent':3A,56B,79C 'unavail':113C 'use':106C 'vendor':102C 'vulner':75C","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2024-02-21T18:15:50+00:00","kev":{"dateAdded":"2024-11-18","dueDate":"2024-12-09","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","knownRansomwareCampaignUse":"Unknown"},"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","cvss_by":"security@progress.com","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2024-1212","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-1212","severity":null,"published_at":"2024-11-18T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:51+00:00","fetched_at":"2026-10-25T11:39:15+00:00","note":null},{"source":"nvd","external_id":"CVE-2024-1212","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-1212","severity":null,"published_at":"2024-02-21T18:15:50+00:00","modified_at":"2026-07-13T19:49:31+00:00","first_seen_at":"2026-10-23T22:29:05+00:00","fetched_at":"2026-10-23T22:29:05+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}