VYPR
← All advisories
High severity8.4NVD Advisory· Published Mar 22, 2024· Updated Jun 17, 2026

CVE-2024-2448

CVE-2024-2448

Description

An OS command injection vulnerability has been identified in LoadMaster.  An authenticated UI user with any permission settings may be able to inject commands into a UI component using a shell command resulting in OS command injection.

Affected products

7
  • LoadMaster/LoadMasterllm-create
  • Kemp/LoadMasterllm-create
  • Progress (organisation)/Loadmaster4 versions
    cpe:2.3:a:progress:loadmaster:*:*:*:*:ltsf:*:*:*+ 3 more
    • cpe:2.3:a:progress:loadmaster:*:*:*:*:ltsf:*:*:*range: >=7.2.49.0,<7.2.54.9
    • cpe:2.3:a:progress:loadmaster:*:*:*:*:ga:*:*:*range: >=7.2.55.0,<7.2.59.3
    • cpe:2.3:a:progress:loadmaster:7.1.35.10:*:*:*:mt:*:*:*
    • cpe:2.3:a:progress:loadmaster:7.2.48.10:*:*:*:lts:*:*:*
  • Process Software/LoadMastercpe-rescue
    Range: 7.2.55.0

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.