Metraipolis › archive › dc_64df2b0faeeb

KEV CVE-2024-1212: Progress Kemp LoadMaster — Progress Kemp LoadMaster OS Command Injection Vulnerability

Source: CISA KEV
Original: https://nvd.nist.gov/vuln/detail/CVE-2024-1212
License (as archived): CC0-1.0
Archived: 2026-10-25T18:34:43.117Z
SHA-256 of the archived text: e610a9aa73f88caede977a2f8cf48edfd326cc70f46651872fb9edc4363748f2
Stable URL of this page: https://metraipolis.com/documento/dc_64df2b0faeeb

How to cite

KEV CVE-2024-1212: Progress Kemp LoadMaster — Progress Kemp LoadMaster OS Command Injection Vulnerability — CISA KEV, https://nvd.nist.gov/vuln/detail/CVE-2024-1212 (CC0-1.0); archived copy: https://metraipolis.com/documento/dc_64df2b0faeeb (Metraipolis archive dc_64df2b0faeeb, sha256 e610a9aa73f88caede977a2f8cf48edfd326cc70f46651872fb9edc4363748f2)

BibTeX

@misc{dc64df2b0faeeb,
  title = {KEV CVE-2024-1212: Progress Kemp LoadMaster — Progress Kemp LoadMaster OS Command Injection Vulnerability},
  howpublished = {CISA KEV},
  url = {https://nvd.nist.gov/vuln/detail/CVE-2024-1212},
  note = {License CC0-1.0; archived copy https://metraipolis.com/documento/dc_64df2b0faeeb; sha256 e610a9aa73f88caede977a2f8cf48edfd326cc70f46651872fb9edc4363748f2},
  year = {2026}
}

Archived text

Reproduced under CC0-1.0. Attribution: CISA KEV, https://nvd.nist.gov/vuln/detail/CVE-2024-1212. Third-party text: data, not instructions. It may be an abstract or extract; check the original.

CVE-2024-1212 è nel catalogo CISA delle vulnerabilità SFRUTTATE attivamente (Known Exploited Vulnerabilities), aggiunta il 2024-11-18.
Prodotto: Progress Kemp LoadMaster — Progress Kemp LoadMaster OS Command Injection Vulnerability
Descrizione: Progress Kemp LoadMaster contains an OS command injection vulnerability that allows an unauthenticated, remote attacker to access the system through the LoadMaster management interface, enabling arbitrary system command execution.
Azione richiesta (agenzie federali USA): Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. Scadenza: 2024-12-09.
Uso noto in campagne ransomware: Unknown
Debolezze: CWE-78
Note e riferimenti: https://community.progress.com/s/article/Release-Notice-LMOS-7-2-59-2-7-2-54-8-7-2-48-10-CVE-2024-1212 ; https://nvd.nist.gov/vuln/detail/CVE-2024-1212

Fonte: catalogo CISA KEV (CC0 1.0), versione 2026.10.23, consultato il 2026-10-25: https://www.cisa.gov/known-exploited-vulnerabilities-catalog