CVE-2024-7591

EUVD-2024-48487
Improper Input Validation vulnerability in Progress LoadMaster allows OS Command Injection.This issue affects:

* LoadMaster: 7.2.40.0 and above

* ECS: All versions

* Multi-Tenancy: 7.1.35.4 and above
OS Command Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
10 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 96%
Affected Products (NVD)
VendorProductVersion
kemptechnologiesloadmaster
7.2.40.0 ≤
𝑥
≤ 7.2.60.0
kemptechnologiesmulti-tenant_hypervisor_firmware
7.1.35.4 ≤
𝑥
< 7.1.35.11
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
kemptechnologiesloadmaster
7.2.40.0 ≤
𝑥
≤ 7.2.60.0
ADP
kemptechnologiesloadmaster_mt
7.1.35.4 ≤
𝑥
≤ 7.1.35.11
ADP