https://pwn.watch/t/kemp-loadmaster Live security incidents worldwide: CVEs, patch status, fixed versions, advisories and the posts that broke them. en Mon, 18 Nov 2024 00:00:00 GMT https://pwn.watch/i/progress-kemp-loadmaster-cve-2024-1212 https://pwn.watch/i/progress-kemp-loadmaster-cve-2024-1212 Mon, 18 Nov 2024 00:00:00 GMT critical <p>Progress Kemp LoadMaster contains an OS command injection vulnerability that allows an unauthenticated, remote attacker to access the system through the LoadMaster management interface, enabling arbitrary system command execution. Added to the CISA KEV catalog on 2024-11-18.</p> <p><strong>Status:</strong> closed · <strong>Patch:</strong> patched · <strong>Fixed in:</strong> See vendor advisory linked in sources</p> <p><strong>Latest updates:</strong></p><ul><li>2024-11-18: CISA added CVE-2024-1212 to the KEV catalog (federal deadline 2024-12-09) (<a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog">source</a>)</li><li>2024-02-21: CVE-2024-1212 published (<a href="https://nvd.nist.gov/vuln/detail/CVE-2024-1212">source</a>)</li></ul> <p><strong>CVEs:</strong> CVE-2024-1212</p>