CVE-2018-9091: Critical severity Kemptechnologies Loadmaster Operating System vulnerability
A critical vulnerability in the KEMP LoadMaster Operating System (LMOS) 6.0.44 through 7.2.41.2 and Long Term Support (LTS) LMOS before 7.1.35.5 related to Session Management could allow an unauthenticated, remote attacker to bypass security protections, gain system privileges, and execute elevated commands such as ls, ps, cat, etc., thereby compromising the system. Through this remote execution, in certain cases, exposure of sensitive system data such as certificates, private keys, and other information may be possible.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2018-9091?
CVE-2018-9091 is classified as a critical vulnerability due to its potential to allow unauthorized system access.
How do I fix CVE-2018-9091?
To fix CVE-2018-9091, upgrade the KEMP LoadMaster Operating System to a version above 7.2.41.2 or the Long Term Support version above 7.1.35.5.
What impact does CVE-2018-9091 have on system security?
CVE-2018-9091 can lead to bypassing security protections, allowing an attacker to gain elevated privileges on the system.
Is CVE-2018-9091 exploitable without authentication?
Yes, CVE-2018-9091 can be exploited by unauthenticated remote attackers.
Which KEMP LoadMaster versions are affected by CVE-2018-9091?
KEMP LoadMaster Operating System versions from 6.0.44 through 7.2.41.2 and LTS versions before 7.1.35.5 are affected by CVE-2018-9091.