CVE-2024-1212 Exploitation - Progress Kemp LoadMaster Unauthenticated Command Injection

Nasreddine Bencherchali (Nextron Systems)

Detects potential exploitation of CVE-2024-1709 an unauthenticated command injection in Progress Kemp LoadMaster. It looks for GET requests to '/access/set' API with the parameters 'param=enableapi' and 'value=1' as well as an "Authorization" header with a base64 encoded value with an uncommon character.

2024-03-20 00:00:00

None

eafb8bd5-7605-4bfe-a9ec-0442bc151f15

attack.initial_access cve.2024.1212 DEMO

Community Rule

Nasreddine Bencherchali

Merge PR #4774 from @nasbench - Fix and update multiple rules

2024-03-26