CVE-2024-1212

Progress Kemp LoadMaster exposes a management interface that fails to sanitize input before passing it to the underlying operating system. An unauthenticated remote attacker who can reach that interface sends a crafted request whose contents are incorporated into a shell command, letting them execute arbitrary system commands on the appliance. There is no authentication requirement and the scope is the full device, so a single request converts network access to the management plane into command execution.

LoadMaster is a load balancer and application delivery controller that sits directly in front of application traffic, terminating TLS and steering requests, which makes command execution on it a powerful position for interception and lateral movement. Public exploit details were released, so exposed management interfaces are actively discoverable. Apply the Progress-supplied add-on/patch to the affected LoadMaster versions promptly, and follow the vendor's hardening guidance to lock the management interface down to a dedicated administrative network rather than leaving it reachable, since a load balancer's control plane should never be exposed to untrusted clients in the first place.