CVE Feed

    Dashboard / CVE / CVE-2024-7591

    CVE-2024-7591

    Improper Input Validation vulnerability in Progress LoadMaster allows OS Command Injection.This issue affects: * LoadMaster: 7.2.40.0 and above * ECS: All versions * Multi-Tenancy: 7.1.35.4 and above

    Published:Sep 5, 2024
    Last Modified:Feb 18, 2025
    EPS:Sep 5, 2024
    EPSS Score:0.32235
    CVSS Score:10

    Affected Products

    Vendor
    Kemptechnologies
    Product
    Loadmaster
    Vendor
    Kemptechnologies
    Product
    Loadmaster Mt
    Vendor
    Kemptechnologies
    Product
    Multi-tenant Hypervisor Firmware

    Exploits

    https://github.com/butyraldehyde/CVE-2024-7591-PoC

    Related CVEs

    CVE-2024-8755 (CVSS 8.4) — Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injec…
    CVE-2024-6658 (CVSS 8.4) — Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows OS Command Injecti…
    CVE-2023-29929 (CVSS 7.5) — Buffer Overflow vulnerability found in Kemptechnologies Loadmaster before v.7.2.60.0 allows a remote attacker …
    CVE-2024-2448 (CVSS 8.4) — An OS command injection vulnerability has been identified in LoadMaster.  An authenticated UI user with any pe…
    CVE-2024-1212 (CVSS 10) — Unauthenticated remote attackers can access the system through the LoadMaster management interface, enabling a…
    CVE-2014-5287 (CVSS 8.8) — A Bash script injection vulnerability exists in Kemp Load Master 7.1-16 and earlier due to a failure to saniti…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High