CVE-2024-2448: LoadMaster Command Injection Vulnerability
Published Mar 22, 2024
·Updated
An OS command injection vulnerability has been identified in LoadMaster. An authenticated UI user with any permission settings may be able to inject commands into a UI component using a shell command resulting in OS command injection.
Affected Software
5 affected components
Kemp LoadMaster
Progress LoadMaster>=7.2.49.0<7.2.54.9
Progress LoadMaster>=7.2.55.0<7.2.59.3
Progress LoadMaster=7.1.35.10
Progress LoadMaster=7.2.48.10
Event History
Mar 22, 2024
CVE Published
via MITRE·01:32 PM
Data Sourced
via MITRE·01:32 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·02:15 PM
DescriptionSeverityWeaknessAffected Software
Sep 4, 57087
Event
via NVD·02:38 AM
Frequently Asked Questions
1
What is the severity of CVE-2024-2448?
CVE-2024-2448 is considered a high severity OS command injection vulnerability.
2
How do I fix CVE-2024-2448?
To fix CVE-2024-2448, upgrade your Kemp LoadMaster to a version that is not affected by this vulnerability.
3
Who is affected by CVE-2024-2448?
CVE-2024-2448 affects authenticated users of Kemp LoadMaster across multiple versions.
4
What causes CVE-2024-2448?
CVE-2024-2448 is caused by improper handling of user input in a UI component that allows command injection.
5
What are the consequences of exploiting CVE-2024-2448?
Exploiting CVE-2024-2448 could lead to unauthorized execution of OS commands on the affected system.