High severity · published May 2, 2024
CVE-2024-3543
LoadMaster Reversible Password Encryption Algorithm
7.5
CVSS
0.3%
EPSS
No
On KEV
Description
Use of reversible password encryption algorithm allows attackers to decrypt passwords. Sensitive information can be easily unencrypted by the attacker, stolen credentials can be used for arbitrary actions to corrupt the system.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 20% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LO
LoadMaster · Progress Software Corporation
LoadMaster 7.2.55.0 (GA) before 7.2.59.4; LoadMaster 7.2.49.0 (LTSF) before 7.2.54.10; LoadMaster 7.2.48.11 (LTS) before 7.2.48.12 · source: vendor, NVD, CISA
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-3543
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-3543
Product
https://kemptechnologies.com/
Product
https://support.kemptechnologies.com/hc/en-us/articles/25724813518605-ECS-Connection-Manager-Security-Vulnerabilities-CVE-2024-3544-and-CVE-2024-3543
More from LoadMaster
7.5
CVE-2024-3544
LoadMaster Hardcoded SSH Key