CVE-2024-7591: Improper Input Validation vulnerability in Progress LoadMaster allows OS Command Injection
Published Sep 5, 2024
·Updated
Improper Input Validation vulnerability in Progress LoadMaster allows OS Command Injection.This issue affects:
LoadMaster: 7.2.40.0 and above
ECS: All versions
Multi-Tenancy: 7.1.35.4 and above
Affected Software
2 affected components
Kemptechnologies Loadmaster>=7.2.40.0<=7.2.60.0
Kemptechnologies Multi-tenant Hypervisor Firmware>=7.1.35.4<7.1.35.11
Remediation
Event History
Sep 5, 2024
CVE Published
via MITRE·05:16 PM
Data Sourced
via MITRE·05:16 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·06:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Sep 8, 2024
News Published
via BleepingComputer·02:11 PM
Sep 9, 2024
News Published
via BleepingComputer·06:57 AM
Nov 19, 2024
News Published
via BleepingComputer·09:18 PM
Frequently Asked Questions
1
What is the severity of CVE-2024-7591?
CVE-2024-7591 has been rated with a CVSS score indicating a severity level of 10.0, indicating critical risk.
2
How do I fix CVE-2024-7591?
To mitigate CVE-2024-7591, ensure that you upgrade your LoadMaster to version 7.2.60.0 or later, or the Multi-Tenancy firmware to version 7.1.35.11 or later.
3
Which versions of LoadMaster are affected by CVE-2024-7591?
LoadMaster versions from 7.2.40.0 to 7.2.60.0 are affected by CVE-2024-7591.
4
Is ECS affected by CVE-2024-7591?
Yes, all versions of ECS are affected by CVE-2024-7591.
5
What type of vulnerability is CVE-2024-7591 classified as?
CVE-2024-7591 is classified as an Improper Input Validation vulnerability that allows OS Command Injection.