cvedb.io
CVE-2018-9091
CRITICAL · CVSS 9.8
EPSS exploitation probability: 0%
Published 2018-05-25T19:29:00.523 · Last modified 2026-06-17T02:06:04.000

Summary

A critical vulnerability in the KEMP LoadMaster Operating System (LMOS) 6.0.44 through 7.2.41.2 and Long Term Support (LTS) LMOS before 7.1.35.5 related to Session Management could allow an unauthenticated, remote attacker to bypass security protections, gain system privileges, and execute elevated commands such as ls, ps, cat, etc., thereby compromising the system. Through this remote execution, in certain cases, exposure of sensitive system data such as certificates, private keys, and other information may be possible.

Affected products

kemptechnologies — loadmaster_operating_system

Does this affect you?

Add your gear to cvedb and we'll alert you only when kemptechnologies ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.