CVE-2024-7591 Scanner

LoadMaster, developed by Kemp Technologies, is a leading load balancing solution used by organizations of all sizes to distribute network traffic across multiple servers. It ensures high availability, scalability, and security for critical applications in data centers and cloud environments. System administrators and IT teams rely on LoadMaster to optimize performance and maintain service continuity under heavy loads.

OS Command Injection (CVE-2024-7591) is a critical vulnerability that arises when the LoadMaster fails to properly sanitize user-supplied input before passing it to system commands. Attackers can exploit this by injecting malicious commands through crafted HTTP requests, which are then executed by the underlying operating system with elevated privileges.

The vulnerability specifically affects the LoadMaster management web interface, where parameters in certain administrative functions are not validated. By sending specially crafted requests to endpoints like /admin or /cgi-bin, an attacker can inject commands that bypass intended restrictions and run arbitrary shell commands on the server.

If exploited, this vulnerability allows an attacker to gain full control over the LoadMaster appliance, leading to data theft, service disruption, or further compromise of the internal network. Given the CVSS score of 10.0, immediate remediation is critical to prevent complete system takeover and potential lateral movement within the infrastructure.