VDB
BDU%3A2025-01308
BDU%3A2025-01308
PUBLISHED
CVSS 10 CRITICAL
Уязвимость платформы для развертывания и управления приложениями LoadMaster, связанная с непринятием мер по нейтрализации специальных элементов, используемых в команде операционной системы, позволяющая нарушителю выполнить произвольные команды
Risk Scores
CVSS 3.1
10
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Progress Software Corporation | LoadMaster | |
| kemptechnologies | loadmaster | 7.2.40.0 |
| kemptechnologies | loadmaster_mt | 7.1.35.4 |
| Progress | LoadMaster | 7.2.40.0 |
Timeline
- Sep 5, 2024 CVE Published
- Sep 5, 2024 PoC Published
- Sep 6, 2024 PoC Published
- Sep 6, 2024 PoC Published
- Sep 6, 2024 PoC Published
- Sep 8, 2024 PoC Published
- Sep 9, 2024 PoC Published
- Sep 9, 2024 PoC Published
- Sep 9, 2024 PoC Published
- Sep 9, 2024 PoC Published
- Sep 9, 2024 PoC Published
- Sep 10, 2024 PoC Published
References
- https://insinuator.net/2024/11/vulnerability-disclosure-command-injection-in-kemp-loadmaster-load-balancer-cve-2024-7591 url
- https://support.kemptechnologies.com/hc/en-us/articles/29196371689613-LoadMaster-Security-Vulnerability-CVE-2024-7591 url
- https://securityonline.info/cve-2024-7591-cvss-10-critical-vulnerability-discovered-in-progress-loadmaster/ advisory