CVE-2014-5287

HighCVSS 8.8

Published: 08/01/2020(UTC)Updated: 13/07/2026(UTC)Translated: 14/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

7.93%

94th percentile - higher than 94% of all known CVEs

Summary

A Bash script injection vulnerability in Kemp Load Master 7.1-16 and earlier due to insufficient input sanitization in the Web User Interface (WUI).

Risk Assessment

An attacker can remotely execute arbitrary Bash commands on the device, leading to full system compromise and potential control over network traffic.

Recommendation

Immediately upgrade Kemp Load Master to a version later than 7.1-16, or if not possible, restrict WUI access to trusted IP addresses only.

Original NVD description (English source)

A Bash script injection vulnerability exists in Kemp Load Master 7.1-16 and earlier due to a failure to sanitize input in the Web User Interface (WUI).