Vulnerability Description
A critical vulnerability in the KEMP LoadMaster Operating System (LMOS) 6.0.44 through 7.2.41.2 and Long Term Support (LTS) LMOS before 7.1.35.5 related to Session Management could allow an unauthenticated, remote attacker to bypass security protections, gain system privileges, and execute elevated commands such as ls, ps, cat, etc., thereby compromising the system. Through this remote execution, in certain cases, exposure of sensitive system data such as certificates, private keys, and other information may be possible.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Kemptechnologies | Loadmaster Operating System | >= 6.0.44, <= 7.2.41.2 |
References
- https://support.kemptechnologies.com/hc/en-us/articles/360001982452-Mitigation-fPatchVendor Advisory
- https://support.kemptechnologies.com/hc/en-us/articles/360001982452-Mitigation-fPatchVendor Advisory
FAQ
What is CVE-2018-9091?
CVE-2018-9091 is a vulnerability with a CVSS score of 9.8 (CRITICAL). A critical vulnerability in the KEMP LoadMaster Operating System (LMOS) 6.0.44 through 7.2.41.2 and Long Term Support (LTS) LMOS before 7.1.35.5 related to Session Management could allow an unauthenti...
How severe is CVE-2018-9091?
CVE-2018-9091 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2018-9091?
Check the references section above for vendor advisories and patch information. Affected products include: Kemptechnologies Loadmaster Operating System.