https://insinuator.net/authors/marius-walter/ Recent content in Marius Walter on Insinuator.net - Bold Statements Hugo en-us Wed, 27 Nov 2024 00:00:00 +0000 https://insinuator.net/2024/11/vulnerability-disclosure-command-injection-in-kemp-loadmaster-load-balancer-cve-2024-7591/ Wed, 27 Nov 2024 00:00:00 +0000 https://insinuator.net/2024/11/vulnerability-disclosure-command-injection-in-kemp-loadmaster-load-balancer-cve-2024-7591/ <p>While conducting security research, I identified a critical vulnerability in Kemp’s LoadMaster Load Balancer. This vulnerability is a <a href="https://owasp.org/www-community/attacks/Command_Injection">Command Injection</a> and allows full system compromise. It requires no authentication and can be exploited remotely by having access to the Web User Interface (WUI). Kemp found that all LoadMaster versions up to and including version 7.2.60.0 and also the multi-tenant hypervisors up to and including version 7.1.35.11 are affected.</p> <p>Kemp LoadMaster is a widely used Load Balancing Application that can commonly be seen in customer engagements. Therefore, we decided to take a closer look as part of our regular research projects.</p>