CVE-2024-1212 Progress Kemp LoadMaster OS Command Injection
Unauthenticated attackers can execute arbitrary system commands on LoadMaster devices via the management interface.
- Exploited in the wild
- Since 18 Nov 2024
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-1212?
CVE-2024-1212 is a critical command injection vulnerability in Progress Software LoadMaster, published on 21 Feb 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Unauthenticated remote attackers can access the system through the LoadMaster management interface, enabling arbitrary system command execution.
Weakness: CWE-78
Which versions are affected by CVE-2024-1212?
It affects 1 product.
Products include Progress Loadmaster.
How do I fix CVE-2024-1212?
No fix has been published for CVE-2024-1212 yet. Limit exposure of the affected software until one is available. US federal agencies must fix it by 9 Dec 2024.
Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.
Is CVE-2024-1212 being exploited?
Yes. Attackers have exploited CVE-2024-1212 in the wild since at least 18 Nov 2024.
Public exploit code: 2 Metasploit modules, 1 Nuclei template and 2 proofs of concept on GitHub.
Other vulnerabilities in Progress Software LoadMaster
- CVE-2014-5287 Command injection in n/a
- CVE-2024-56131 Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection.
- CVE-2024-56132 Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection.
- CVE-2024-56133 Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection.
- CVE-2024-56134 Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection.
Sources
Also known as GHSA-8vv7-j7w3-28ww.