Lucene search

K
nessusThis script is Copyright (C) 2024 and is owned by Tenable, Inc. or an Affiliate thereof.PROGRESS_KEMP_LOADMASTER_CVE-2024-1212.NBIN
HistoryMar 25, 2024 - 12:00 a.m.

Progress Kemp LoadMaster Command Injection (CVE-2024-1212)

2024-03-2500:00:00
This script is Copyright (C) 2024 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
16
progress kemp loadmaster
command injection
cve-2024-1212
scanner
binary data

CVSS3

10

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

AI Score

8.4

Confidence

Low

EPSS

0.003

Percentile

65.6%

The Progress Kemp LoadMaster running on the remote host is affected by a command injection vulnerability. An unauthenticated, remote attacker can exploit this, via specially crafted messages, to execute arbitrary commands on the appliance.

Binary data progress_kemp_loadmaster_CVE-2024-1212.nbin

CVSS3

10

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

AI Score

8.4

Confidence

Low

EPSS

0.003

Percentile

65.6%