CVEブラウザに戻る

CVE-2024-1212

🔥 Known Exploited (CISA KEV)CRITICAL

10.0

CVSS Severity Score

EPSS Score49.2840%

EPSS Percentile93.83th

Published2024-02-21

Last Modified2026-07-13

Data SourcesNVDCISA KEVFIRST.org EPSS

Vulnerability Description

Unauthenticated remote attackers can access the system through the LoadMaster management interface, enabling arbitrary system command execution.

Affected Platforms (CPE)

💻

Progress

Loadmaster

>= 7.2.48.1 and < 7.2.48.10>= 7.2.54.0 and < 7.2.54.8>= 7.2.55.0 and < 7.2.59.2

References & Advisories

🔗 https://freeloadbalancer.com/

🔗 https://kemptechnologies.com/

🔗 https://support.kemptechnologies.com/hc/en-us/articles/23878931058445-LoadMaster-Security-Vulnerability-CVE-2024-1212

🔗 https://support.kemptechnologies.com/hc/en-us/articles/24325072850573-Release-Notice-LMOS-7-2-59-2-7-2-54-8-7-2-48-10-CVE-2024-1212

🔗 https://freeloadbalancer.com/

🔗 https://kemptechnologies.com/

🔗 https://support.kemptechnologies.com/hc/en-us/articles/23878931058445-LoadMaster-Security-Vulnerability-CVE-2024-1212

🔗 https://support.kemptechnologies.com/hc/en-us/articles/24325072850573-Release-Notice-LMOS-7-2-59-2-7-2-54-8-7-2-48-10-CVE-2024-1212

関連する脆弱性情報

CVE-2026-80379.6

OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an un-authenticated attacker to ex...

CVE-2025-17584.3

Improper Input Validation vulnerability in Progress LoadMaster allows : Buffer OverflowThis issue affects: * LoadMaster: 7.2.40.0...

CVE-2024-561358.4

Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection. This issue af...

CVE-2024-561348.4

Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection. This issue af...