Vulnerability in Kemptechnologies Loadmaster Operating System
CVE-2018-9091
A critical vulnerability in the KEMP LoadMaster Operating System (LMOS) 6.0.44 through 7.2.41.2 and Long Term Support (LTS) LMOS before 7.1.35.5 related to Session Management could allow an unauthenticated, remote attacker to bypass security protections, gain system privileges, and execute elevated commands such as ls, ps, cat, etc., thereby compromising the system. Through this remote execution, in certain cases, exposure of sensitive system data such as certificates, private keys, and other information may be possible.
EPSS: 0.033 (87.4th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Kemptechnologies Loadmaster_operating_system
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_CONFIRM, Patch, Vendor Advisory)
Frequently asked questions
- What is CVE-2018-9091?
- CVE-2018-9091 is a critical-severity vulnerability in Kemptechnologies Loadmaster Operating System. CVSS score: 9.8/10. Published 2018-05-25.
- How severe is CVE-2018-9091?
- Critical severity. CVSS v3 base score is 9.8 out of 10.