ZDI-CAN-25708: ZDI-25-151: Progress Software Kemp LoadMaster mangle Stack-based Buffer Overflow Remote Code Execution Vulnerability
Published Mar 18, 2025
·Updated
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Progress Software Kemp LoadMaster. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 9.8. The following CVEs are assigned: CVE-2025-1758.
Affected Software
1 affected component
Progress Software Kemp LoadMaster
Event History
Mar 18, 2025
Advisory Published
via ZDI·05:00 AM
Data Sourced
via ZDI·05:00 AM
Description
Frequently Asked Questions
1
What is the severity of ZDI-CAN-25708?
The severity of ZDI-CAN-25708 is critical, with a CVSS rating of 9.8.
2
How do I fix ZDI-CAN-25708?
To fix ZDI-CAN-25708, apply the latest security patches provided by Progress Software for Kemp LoadMaster.
3
Can ZDI-CAN-25708 be exploited without authentication?
Yes, ZDI-CAN-25708 can be exploited by remote attackers without the need for authentication.
4
What types of attacks are possible with ZDI-CAN-25708?
ZDI-CAN-25708 allows remote attackers to execute arbitrary code on affected installations.
5
Which software is affected by ZDI-CAN-25708?
ZDI-CAN-25708 affects installations of Progress Software Kemp LoadMaster.