Progress · Kemp LoadMaster
CVE-2024-1212
LoadMaster Pre-Authenticated OS Command Injection
Nedir
Unauthenticated remote attackers can access the system through the LoadMaster management interface, enabling arbitrary system command execution.
CISA: Progress Kemp LoadMaster contains an OS command injection vulnerability that allows an unauthenticated, remote attacker to access the system through the LoadMaster management interface, enabling arbitrary system command execution.
Ne yapmalı
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
ABD federal kurumları için son tarih: 9 Aralık 2024
Progress için istismar edilen diğer açıklar
| Eklenme | Açık | Ürün | Önem | Saldırı olasılığı |
|---|---|---|---|---|
| 7 Ağu 2026 | Command Injection | LoadMaster | Kritik 9,6 | 99,8% |
| 3 Mar 2025 | Path Traversal | WhatsUp Gold | Kritik 9,8 | 99,3% |
| 16 Eyl 2024 | SQL Injection | WhatsUp Gold | Kritik 9,8 | 93% |
| 13 Haz 2024 | Authentication Bypass by Spoofing | Telerik Report Server | Kritik 9,8 | 97% |
| 5 Eki 2023 | Deserialization of Untrusted Data | WS_FTP Server | Kritik 10,0 | 90% |
| 2 Haz 2023 | SQL Injection | MOVEit Transfer | Kritik 9,8 | 99,9% |
| 3 Kas 2021 | Telerik UI for ASP.NET AJAX and Sitefinity Cryptographic Weakness | ASP.NET AJAX and Sitefinity | Kritik 9,8 | 75% |
| 3 Kas 2021 | Deserialization of Untrusted Data | Telerik UI for ASP.NET AJAX | Kritik 9,8 | 99,7% |
Kaynaklar: Known Exploited Vulnerabilities (CISA, kamu malı), CVE records (cve.org) ve EPSS (FIRST). Saldırı olasılığı, birinin önümüzdeki 30 günde açığı istismar etmeye çalışacağına dair EPSS tahminidir.