{"uuid": "0bf91035-6647-42f9-90e4-b1a9c8599683", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/progress_kemp_loadmaster_sudo_privesc_2024.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"x86, x64, cmd\", \"author\": [\"Dave Yesland with Rhino Security Labs\", \"bwatters-r7\"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": true, \"default_credential\": false, \"description\": \"This module abuses a feature of the sudo command on Progress Kemp\\n          LoadMaster.  Certain binary files are allowed to automatically elevate\\n          with the sudo command.  This is based off of the file name.  Some files\\n          have this permission are not write-protected from the default 'bal' user.\\n          As such, if the file is overwritten with an arbitrary file, it will still\\n          auto-elevate.  This module overwrites the /bin/loadkeys file with another\\n          executable.\", \"disclosure_date\": \"2024-03-19\", \"fullname\": \"exploit/linux/local/progress_kemp_loadmaster_sudo_privesc_2024\", \"is_install_path\": true, \"mod_time\": \"2025-10-06 17:15:11 +0000\", \"name\": \"Kemp LoadMaster Local sudo privilege escalation\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\", \"artifacts-on-disk\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/linux/local/progress_kemp_loadmaster_sudo_privesc_2024.rb\", \"platform\": \"Linux,Unix\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"linux/local/progress_kemp_loadmaster_sudo_privesc_2024\", \"references\": [\"CVE-2024-1212\", \"URL-https://rhinosecuritylabs.com/research/cve-2024-1212unauthenticated-command-injection-in-progress-kemp-loadmaster/\", \"URL-https://kemptechnologies.com/kemp-load-balancers\"], \"rport\": null, \"session_types\": [\"shell\", \"meterpreter\"], \"targets\": [\"Dropper\", \"Command\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:11.362414Z"}