Descripción
Progress Kemp LoadMaster contains an OS command injection vulnerability that allows an unauthenticated, remote attacker to access the system through the LoadMaster management interface, enabling arbitrary system command execution.
Acción recomendada
Aplicar las mitigaciones del fabricante; si no están disponibles, discontinuar el uso del producto.
Referencias
- Aviso de community.progress.com community.progress.com/s/article/Release-Notice-LMOS-7-2-59-2-7-2-54-…
- Ficha en NVD (NIST) nvd.nist.gov/vuln/detail/CVE-2024-1212
Otras vulnerabilidades de Progress en el catálogo
- CVE-2026-8037 Vulnerabilidad de inyección de comandos en Progress LoadMaster Alta 07-08-2026
- CVE-2024-4885 Vulnerabilidad de recorrido de directorios (path traversal) en Progress WhatsUp Gold Alta 03-03-2025
- CVE-2024-6670 Progress WhatsUp Gold SQL Injection Vulnerability Alta 16-09-2024
- CVE-2024-4358 Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability Alta 13-06-2024
- CVE-2023-40044 Progress WS_FTP Server Deserialization of Untrusted Data Vulnerability Alta 05-10-2023