Skip to content
NewA calmer, faster ZeroHour
Exploit / PoChighExploited in the wild

Progress Software fixed multiple high

Security Affairsby @securityaffairs ()2 min read2 · 1 read
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2024-1212
Unauthenticated OS Command Injection RCE in Progress Kemp LoadMaster
9.895%KEV
KEV
CVE-2024-56132
+4 related CVEs
Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows
6.86%

Indicators of compromise

auto-extracted · verify before use · export allAll
TypeIndicatorContext
ipv47.2.48.12inclusive) 7.2.54.13 (LTSF) XML validation file 5 Feb 2025 7.2.48.12 and all prior versions Upgrade to LTSF or GA 5 Feb 2025 Mu
ipv47.2.54.122.61.0 (GA) XML validation file 5 Feb 2025 From 7.2.49.0 to 7.2.54.12 (inclusive) 7.2.54.13 (LTSF) XML validation file 5 Feb 202
ipv47.2.54.13ion file 5 Feb 2025 From 7.2.49.0 to 7.2.54.12 (inclusive) 7.2.54.13 (LTSF) XML validation file 5 Feb 2025 7.2.48.12 and all pri
ipv47.2.60.1Patched Versions Release Date LoadMaster From 7.2.55.0 to 7.2.60.1 (inclusive) 7.2.61.0 (GA) XML validation file 5 Feb 2025 F

From the original article

2 min read at securityaffairs.com

Progress Software fixed multiple vulnerabilities in its LoadMaster software, which could be exploited to execute arbitrary system commands. Progress Software has addressed multiple high-severity security vulnerabilities (CVE-2024-56131, CVE-2024-56132, CVE-2024-56133, CVE-2024-56134, CVE-2024-56135) in its LoadMaster software.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.