What’s Vulnerable › Vulnerabilities

CVE-2024-3543: LoadMaster Reversible Password Encryption Algorithm

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-05-02 · updated 2026-06-17
• Weakness: CWE-257

Description

Use of reversible password encryption algorithm allows attackers to decrypt passwords.  Sensitive information can be easily unencrypted by the attacker, stolen credentials can be used for arbitrary actions to corrupt the system.

Affected products

• Progress Software LoadMaster: from 7.2.49.0 before 7.2.54.10; from 7.2.55.0 before 7.2.59.4; 7.2.48.11 — fixed in 7.2.54.10, 7.2.59.4

How to fix

Upgrade to a fixed version: Progress Software LoadMaster 7.2.54.10, 7.2.59.4. Check the vendor advisory for mitigations.

References

• https://kemptechnologies.com/
• https://support.kemptechnologies.com/hc/en-us/articles/25724813518605-ECS-Connection-Manager-Security-Vulnerabilities-CVE-2024-3544-and-CVE-2024-3543
• https://kemptechnologies.com/
• https://support.kemptechnologies.com/hc/en-us/articles/25724813518605-ECS-Connection-Manager-Security-Vulnerabilities-CVE-2024-3544-and-CVE-2024-3543

Get alerted when CVE-2024-3543 or the next vulnerability affects your stack