CVE-2024-7591

Summary

Improper Input Validation vulnerability in Progress LoadMaster allows OS Command Injection.This issue affects:

• LoadMaster: 7.2.40.0 and above

• ECS: All versions

• Multi-Tenancy: 7.1.35.4 and above

Affected Software

Weaknesses

• CWE-78: CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: yes
  • Technical Impact: total

References

• https://support.kemptechnologies.com/hc/en-us/articles/29196371689613-LoadMaster-Security-Vulnerability-CVE-2024-7591
• https://insinuator.net/2024/11/vulnerability-disclosure-command-injection-in-kemp-loadmaster-load-balancer-cve-2024-7591

• ←Previous
• Next→