CVE-2024-1212

Severity

CRITICAL

CVSS

10.0

EPSS

0.95388

Risk score

58.39

CISA KEV

Yes

PoC

Published

2024-02-21

Modified

2025-10-21

First seen

2026-08-07

Aliases

EUVD-2024-16979, GHSA-8VV7-J7W3-28WW

Products

Progress Software:LoadMaster 7.2.48.1 <7.2.48.10, Progress Software:LoadMaster 7.2.54.0 <7.2.54.8, Progress Software:LoadMaster 7.2.55.0 <7.2.59.2, Progress:Kemp LoadMaster

Sources

cisa.gov CVE-2024-1212
euvd EUVD-2024-16979

Description

Unauthenticated remote attackers can access the system through the LoadMaster management interface, enabling arbitrary system command execution.

References

https://www.cisa.gov/known-exploited-vulnerabilities-catalog
https://nvd.nist.gov/vuln/detail/CVE-2024-1212
https://community.progress.com/s/article/Release-Notice-LMOS-7-2-59-2-7-2-54-8-7-2-48-10-CVE-2024-1212
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-16979
https://kemptechnologies.com/
https://freeloadbalancer.com/
https://support.kemptechnologies.com/hc/en-us/articles/24325072850573-Release-Notice-LMOS-7-2-59-2-7-2-54-8-7-2-48-10-CVE-2024-1212
https://support.kemptechnologies.com/hc/en-us/articles/23878931058445-LoadMaster-Security-Vulnerability-CVE-2024-1212