CVE-2024-1212

CRITICAL

KEV

KISA

Unauthenticated remote attackers can access the system through the LoadMaster management interface, enabling arbitrary system command execution.

설명

Unauthenticated remote attackers can access the system through the LoadMaster management interface, enabling arbitrary system command execution.

Score Summary

CVSS Score: 10.0
Version: 3.1
VPI: 100
Why this VPI (explainable, experimental)
VPI breakdown
Impact 100.00
Exploitation signal(KEV listed) ×1.50
VPI 100.00
VPI formula vpi-v1
EPSS: 95.4%
(상위 99.9%)
Attack Vector: Network
Low Complexity
No Privileges
No User Interaction
Scope Changed
High Confidentiality Impact
High Integrity Impact
High Availability Impact

Details

CISA KEV Listing

Required Action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Listed in KISA bulletin

This CVE is referenced in a KISA security bulletin (Korean only).

Vulnerability Lifecycle

CWE Weakness Classification

References (5)

NVD
https://support.kemptechnologies.com/hc/en-us/articles/23878931058445-LoadMaster-Security-Vulnerability-CVE-2024-1212
NVD
https://support.kemptechnologies.com/hc/en-us/articles/24325072850573-Release-Notice-LMOS-7-2-59-2-7-2-54-8-7-2-48-10-CVE-2024-1212
NVD

Affected Products (1)

StatusAnalyzed

KISA Listed

12/01/2024

CISA KEVDue Date12/09/2024

NVDLast Modified07/13/2026

https://freeloadbalancer.com/

NVD

NVD

Impact	100.00
Exploitation signal(KEV listed)	×1.50
VPI	100.00