CVE-2024-1212
LoadMaster Pre-Authenticated OS Command Injection
Unauthenticated remote attackers can access the system through the LoadMaster management interface, enabling arbitrary system command execution.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
LoadMaster Pre-Authenticated OS Command Injection
Unauthenticated remote attackers can access the system through the LoadMaster management interface, enabling arbitrary system command execution.
- Record
CVE-2024-1212- CVSS 3.1
- 10.0 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H - Weakness
- CWE-78
- Updated
- 2026-11-02
EUVDEUVD-2024-16979
Unauthenticated remote attackers can access the system through the LoadMaster management interface, enabling arbitrary system command execution.
- Record
EUVD-2024-16979- CVSS 3.1
- 10.0 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-8vv7-j7w3-28ww
Unauthenticated remote attackers can access the system through the LoadMaster management...
Unauthenticated remote attackers can access the system through the LoadMaster management interface, enabling arbitrary system command execution.
- Record
GHSA-8vv7-j7w3-28ww- CVSS 3.1
- 10.0 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H - Weakness
- CWE-78
- Updated
- 2026-11-02
CISA KEV No score
Progress Kemp LoadMaster OS Command Injection Vulnerability
Progress Kemp LoadMaster contains an OS command injection vulnerability that allows an unauthenticated, remote attacker to access the system through the LoadMaster management interface, enabling arbitrary system command execution.
- Record
CVE-2024-1212- Weakness
- CWE-78
- Updated
- 2026-11-02
NVD
Unauthenticated remote attackers can access the system through the LoadMaster management interface, enabling arbitrary system command execution.
- Record
CVE-2024-1212- CVSS 3.1
- 10.0 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H - CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-78
- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| PoC in GitHub | Chocapikk/CVE-2024-1212 | 2024-03-19 |
| Metasploit | Kemp LoadMaster Unauthenticated Command Injection | 2024-03-19 |
| Metasploit | Kemp LoadMaster Local sudo privilege escalation | 2024-03-19 |
| PoC in GitHub | r0otk3r/CVE-2024-1212 | 2025-07-12 |
| Nuclei | Progress Kemp LoadMaster - Command Injection |
History
| Recorded | Changed | Sources |
|---|---|---|
| exploitation, exploits | ||
| first indexed | CVE List, EUVD, GitHub Advisories, CISA KEV, Metasploit, Nuclei, NVD, PoC in GitHub |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2024-1212 is a critical vulnerability (CVSS 10.0) in Kemptechnologies Loadmaster, published February 21, 2024. CISA lists it as known to be exploited, since November 18, 2024. EUVD reports exploitation since November 18, 2024. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 95.4%, the 99th percentile. No source names a fixed version.
References
kemptechnologies.com
freeloadbalancer.com
support.kemptechnologies.com/hc/en-us/articles/24325072850573-Release-Notice-LMOS-7-2-59-2-7-2-54-8-7-2-48-10-CVE-2024-1212
cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-1212
nvd.nist.gov/vuln/detail/CVE-2024-1212
github.com/advisories/GHSA-8vv7-j7w3-28ww