Search/CVE-2024-3544
● CVE — High

CVE-2024-3544

VendorprogressProductloadmasterDiscoveredMay 2, 2024UpdatedFeb 3, 2025

Unauthenticated attackers can perform actions, using SSH private keys, by knowing the IP address and having access to the same network of one of the machines in the HA or Cluster group. This vulnerability has been closed by enhancing LoadMaster partner communications to require a shared secret that must be exchanged between the partners before communication can proceed.

CVSS v3.1
7.5 HIGH
EPSS
0.38%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
CVSS v3.1 Detail
Attack VectorADJACENT
Attack ComplexityHIGH
Privileges RequiredNONE
User InteractionNONE
ScopeUNCHANGED
ConfidentialityHIGH
IntegrityHIGH
AvailabilityHIGH
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Connections
2 relationships
Timeline
disclosure → media coverage
May 2, 2024
Disclosure — published as a CVE record. · last revised by NVD Feb 3, 2025