CRITICAL: CVE-2024-1212 actively exploited — progress loadmaster

CVE: CVE-2024-1212

CVSS: 10 (3.1) — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Severity: CRITICAL

Status: ✅ Confirmed exploited in the wild (CISA KEV)

Affected

• progress loadmaster

Summary

Unauthenticated remote attackers can access the system through the LoadMaster management interface, enabling arbitrary system command execution.

Verified Sources

• NVD entry
• GitHub Advisory
• MITRE
• CISA Known Exploited Vulnerabilities Catalog

References

• https://freeloadbalancer.com/
• https://kemptechnologies.com/
• https://support.kemptechnologies.com/hc/en-us/articles/23878931058445-LoadMaster-Security-Vulnerability-CVE-2024-1212
• https://support.kemptechnologies.com/hc/en-us/articles/24325072850573-Release-Notice-LMOS-7-2-59-2-7-2-54-8-7-2-48-10-CVE-2024-1212
• https://freeloadbalancer.com/
• https://kemptechnologies.com/
• https://support.kemptechnologies.com/hc/en-us/articles/23878931058445-LoadMaster-Security-Vulnerability-CVE-2024-1212
• https://support.kemptechnologies.com/hc/en-us/articles/24325072850573-Release-Notice-LMOS-7-2-59-2-7-2-54-8-7-2-48-10-CVE-2024-1212
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-1212

_Validated by the Lyrie Threat Intelligence Pipeline — 3 independent sources confirmed before publication. No speculation._