Warning: VMware vCenter and Kemp LoadMaster Flaws Under Active Exploitation

Share:

Now-patched security flaws impacting Progress Kemp LoadMaster and VMware vCenter Server have come under active exploitation in the wild, it has emerged.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added CVE-2024-1212 (CVSS score: 10.0), a maximum-severity security vulnerability in Progress Kemp LoadMaster to its Known Exploited Vulnerabilities (KEV) catalog. It was addressed by Progress Software back in February 2024.

“Progress Kemp LoadMaster contains an OS command injection vulnerability that allows an unauthenticated, remote attacker to access the system through the LoadMaster management interface, enabling arbitrary system command execution,” the agency said.

Rhino Security Labs, which discovered and reported the flaw, said successful exploitation enables command execution on LoadMaster should an attacker have access to the administrator web user interface, granting them full access to the load balancer.

CISA’s addition of CVE-2024-1212 coincides with a warning from Broadcom that attackers are now exploiting two security flaws in the VMware vCenter Server, which were demonstrated at the Matrix Cup cybersecurity competition held in China earlier this year.

The flaws, CVE-2024-38812 (CVSS score: 9.8) and CVE-2024-38813 (CVSS score: 7.5), were originally resolved in September 2024, although the company rolled out fixes for the former a second-time last month, stating the previous patches “did not fully address” the problem.

  • CVE-2024-38812 – A heap-overflow vulnerability in the implementation of the DCERPC protocol that could permit a malicious actor with network access to obtain remote code execution
  • CVE-2024-38813 – A privilege escalation vulnerability that could permit a malicious actor with network access to escalate privileges to root

While there are currently no details on the observed exploitation of these vulnerabilities in real-world attacks, CISA is recommending that Federal Civilian Executive Branch (FCEB) agencies remediate CVE-2024-1212 by December 9, 2024, to secure their networks.

The development comes days after Sophos revealed that cybercrime actors are actively weaponizing a critical flaw in Veeam Backup & Replication (CVE-2024-40711, CVSS score: 9.8) to deploy a previously undocumented ransomware called Frag.

Ravie Lakshmanan

Leave a Comment

Your email address will not be published. Required fields are marked *

loader-image
London, GB
1:42 pm, Feb 8, 2025
weather icon 6°C
L: 5° | H: 6°
overcast clouds
Humidity: 91 %
Pressure: 1018 mb
Wind: 10 mph ENE
Wind Gust: 0 mph
UV Index: 0
Precipitation: 0 mm
Clouds: 100%
Rain Chance: 0%
Visibility: 3 km
Sunrise: 7:27 am
Sunset: 5:02 pm
DailyHourly
Daily ForecastHourly Forecast
Today 9:00 pm
weather icon
5° | 6°°C 0 mm 0% 4 mph 91 % 1021 mb 0 mm/h
Tomorrow 9:00 pm
weather icon
3° | 5°°C 1 mm 100% 10 mph 97 % 1030 mb 0 mm/h
Mon Feb 10 9:00 pm
weather icon
3° | 4°°C 1 mm 100% 11 mph 96 % 1029 mb 1.38 mm/h
Tue Feb 11 9:00 pm
weather icon
3° | 4°°C 0.38 mm 38% 8 mph 97 % 1020 mb 0 mm/h
Wed Feb 12 9:00 pm
weather icon
4° | 6°°C 0 mm 0% 5 mph 92 % 1023 mb 0 mm/h
Today 3:00 pm
weather icon
6° | 6°°C 0 mm 0% 4 mph 91 % 1018 mb 0 mm/h
Today 6:00 pm
weather icon
5° | 6°°C 0 mm 0% 4 mph 88 % 1019 mb 0 mm/h
Today 9:00 pm
weather icon
4° | 5°°C 0 mm 0% 3 mph 84 % 1021 mb 0 mm/h
Tomorrow 12:00 am
weather icon
3° | 3°°C 0 mm 0% 3 mph 84 % 1024 mb 0 mm/h
Tomorrow 3:00 am
weather icon
3° | 3°°C 0 mm 0% 4 mph 87 % 1025 mb 0 mm/h
Tomorrow 6:00 am
weather icon
4° | 4°°C 0.29 mm 29% 7 mph 94 % 1026 mb 0 mm/h
Tomorrow 9:00 am
weather icon
4° | 4°°C 0.99 mm 99% 7 mph 97 % 1028 mb 0 mm/h
Tomorrow 12:00 pm
weather icon
4° | 4°°C 1 mm 100% 10 mph 96 % 1028 mb 0 mm/h
Name Price24H (%)
Bitcoin(BTC)
€93,125.19
-1.31%
Ethereum(ETH)
€2,531.33
-4.55%
Tether(USDT)
€0.97
-0.03%
XRP(XRP)
€2.33
0.95%
Solana(SOL)
€188.53
-1.02%
USDC(USDC)
€0.97
0.00%
Dogecoin(DOGE)
€0.241317
-1.29%
Shiba Inu(SHIB)
€0.000015
2.62%
Pepe(PEPE)
€0.000009
-0.81%
Scroll to Top