THREATOPS

THREAT OPS › CVEs › CVE-2024-1212

CVE-2024-1212 — Progress Kemp LoadMaster OS Command Injection Vulnerability

CISA KEVExploited: confirmedProgress

Progress Kemp LoadMaster contains an OS command injection vulnerability that allows an unauthenticated, remote attacker to access the system through the LoadMaster management interface, enabling arbitrary system command execution.

Vulnerability details

Affected productsKemp LoadMaster
KEV remediation due2024-12-09

Related reporting

[NVD] CVE-2024-1212 (CRITICAL 10.0) — Unauthenticated remote attackers can access the system through the LoadMaster management interface, enabling arbitrary system command execution.nvd
6th July – Threat Intelligence Reportcheckpoint_research