CISA tags Progress Kemp LoadMaster flaw as exploited in attacks

Share:

The U.S. Cybersecurity & Infrastructure Security Agency (CISA) has added three new flaws in its Known Exploited Vulnerabilities (KEV) catalog, including a critical OS command injection impacting Progress Kemp LoadMaster.

The flaw, discovered by Rhino Security Labs and tracked as CVE-2024-1212, was addressed via an update released on February 21, 2024. However, this is the first report of it being under active exploitation in the wild.

“Progress Kemp LoadMaster contains an OS command injection vulnerability that allows an unauthenticated, remote attacker to access the system through the LoadMaster management interface, enabling arbitrary system command execution,” reads the flaw’s description.

CVE-2024-1212 (CVSS v3.1 score: 10.0, “critical”) impacts LoadMaster versions 7.2.48.1 before 7.2.48.10, 7.2.54.0 before 7.2.54.8, and 7.2.55.0 before 7.2.59.2.

LoadMaster is an application delivery controller (ADC) and load-balancing solution used by large organizations to optimize app performance, manage network traffic, and ensure high service availability.

CISA orders federal organizations using the product to apply the available updates and mitigations until December 9, 2024, or stop using it.

No details about the active exploitation activity have been published at this time, and the status of its exploitation in ransomware campaigns is marked as unknown.

The other two flaws CISA added to KEV are CVE-2024-0012 and CVE-2024-9474, authentication bypass and OS command injection flaws respectively, impacting Palo Alto Networks PAN-OS Management Interface.

Progress Software recently fixed another max severity flaw in LoadMaster products that allows remote attackers to execute arbitrary commands on the device.

Identified as CVE-2024-7591, the flaw is categorized as an improper input validation problem allowing an unauthenticated, remote attacker to access LoadMaster’s management interface using a specially crafted HTTP request.

CVE-2024-7591 impacts LoadMaster version 7.2.60.0 and all previous versions, as well as MT Hypervisor version 7.1.35.11 and all prior releases.

That said, system administrators looking to upgrade to a safe version should move to a release that addresses both maximum severity flaws in LoadMaster, even if active exploitation for CVE-2024-7591 has not been observed yet.

Bill Toulas

 

Leave a Comment

Your email address will not be published. Required fields are marked *

loader-image
London, GB
11:49 pm, Jul 6, 2025
weather icon 17°C
L: 16° | H: 18°
scattered clouds
Humidity: 71 %
Pressure: 1007 mb
Wind: 10 mph WNW
Wind Gust: 0 mph
UV Index: 0
Precipitation: 0 mm
Clouds: 40%
Rain Chance: 0%
Visibility: 10 km
Sunrise: 4:51 am
Sunset: 9:18 pm
DailyHourly
Daily ForecastHourly Forecast
Tomorrow 10:00 pm
weather icon
16° | 18°°C 0.99 mm 99% 13 mph 85 % 1015 mb 0 mm/h
Tue Jul 08 10:00 pm
weather icon
13° | 24°°C 0.2 mm 20% 11 mph 76 % 1020 mb 0 mm/h
Wed Jul 09 10:00 pm
weather icon
15° | 26°°C 0 mm 0% 6 mph 66 % 1023 mb 0 mm/h
Thu Jul 10 10:00 pm
weather icon
19° | 31°°C 0 mm 0% 8 mph 63 % 1024 mb 0 mm/h
Fri Jul 11 10:00 pm
weather icon
20° | 30°°C 0 mm 0% 12 mph 54 % 1023 mb 0 mm/h
Tomorrow 1:00 am
weather icon
17° | 17°°C 0 mm 0% 9 mph 71 % 1007 mb 0 mm/h
Tomorrow 4:00 am
weather icon
16° | 17°°C 0.31 mm 31% 8 mph 75 % 1007 mb 0 mm/h
Tomorrow 7:00 am
weather icon
14° | 15°°C 0.99 mm 99% 10 mph 85 % 1008 mb 0 mm/h
Tomorrow 10:00 am
weather icon
17° | 17°°C 0.33 mm 33% 12 mph 53 % 1011 mb 0 mm/h
Tomorrow 1:00 pm
weather icon
22° | 22°°C 0 mm 0% 13 mph 37 % 1012 mb 0 mm/h
Tomorrow 4:00 pm
weather icon
20° | 20°°C 0 mm 0% 10 mph 41 % 1013 mb 0 mm/h
Tomorrow 7:00 pm
weather icon
20° | 20°°C 0 mm 0% 7 mph 45 % 1014 mb 0 mm/h
Tomorrow 10:00 pm
weather icon
17° | 17°°C 0 mm 0% 11 mph 49 % 1015 mb 0 mm/h
Name Price24H (%)
Bitcoin(BTC)
€92,832.18
1.06%
Ethereum(ETH)
€2,197.92
2.77%
Tether(USDT)
€0.85
-0.01%
XRP(XRP)
€1.94
2.64%
Solana(SOL)
€129.73
3.54%
USDC(USDC)
€0.85
0.00%
Dogecoin(DOGE)
€0.146730
5.10%
Shiba Inu(SHIB)
€0.000010
3.36%
Pepe(PEPE)
€0.000008
5.18%
Scroll to Top