CVE-2024-3543— LoadMaster Reversible Password Encryption Algorithm
Quick assessment
Affected
Progress Software Corporation LoadMaster
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
DELL ECS Connection Manager是美国戴尔（DELL）公司的一个用于管理企业云存储的软件。 DELL ECS Connection Manager存在安全漏洞，该漏洞源于使用可逆密码加密算法，允许攻击者解密密码。
Possible ATT&CK Techniques 1 AI
T1552.001 · Credentials In Files
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2024-3543
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
LoadMaster Reversible Password Encryption Algorithm
Source: CVE Program / CVE List V5
Vulnerability Description
Use of reversible password encryption algorithm allows attackers to decrypt passwords. Sensitive information can be easily unencrypted by the attacker, stolen credentials can be used for arbitrary actions to corrupt the system.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
以可恢复格式存储口令
Source: CVE Program / CVE List V5
Vulnerability Title
DELL ECS Connection Manager 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
DELL ECS Connection Manager是美国戴尔（DELL）公司的一个用于管理企业云存储的软件。 DELL ECS Connection Manager存在安全漏洞，该漏洞源于使用可逆密码加密算法，允许攻击者解密密码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Progress Software Corporation | LoadMaster | LoadMaster 7.2.55.0 (GA) ~ 7.2.59.4 | - |
|
II. Public POCs for CVE-2024-3543
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2024-3543
请登录查看更多情报信息。
Other References for CVE-2024-3543 (1)
-
https://kemptechnologies.com/ product
IV. Related Vulnerabilities
Same product: LoadMaster
-
CVE-2026-59690
Progress LoadMaster, ECS Connection Manager, Object Scale Co -
CVE-2026-59689
Progress LoadMaster, ECS Connection Manager, Object Scale Co -
CVE-2026-59688
Progress LoadMaster, ECS Connection Manager, Object Scale Co -
CVE-2026-59687
Progress LoadMaster, ECS Connection Manager, Object Scale Co -
CVE-2026-59686
Progress LoadMaster, ECS Connection Manager, Object Scale Co
Same vendor: Progress Software Corporation
-
CVE-2026-65941
WhatsUp Gold versions prior to 26.0.2 contain an unauthentic -
CVE-2026-65940
WhatsUp Gold versions prior to 26.0.2 excessive file system -
CVE-2026-65939
WhatsUp Gold versions prior to 26.0.2 contain an arbitrary f -
CVE-2026-65938
WhatsUp Gold versions prior to 26.0.2 contain an improper au -
CVE-2026-65937
WhatsUp Gold versions prior to 26.0.2 contain multiple store
Same weakness: CWE-257
-
CVE-2026-1836
Stored credentials in Redmine -
CVE-2026-22574
Fortinet FortiSOAR PaaS和Fortinet FortiSOAR on-premise 安全漏洞 -
CVE-2026-22576
Fortinet FortiSOAR PaaS和Fortinet FortiSOAR on-premise 安全漏洞 -
CVE-2025-8095
Recoverable obfuscation using the OECH1 prefix encoding in O -
CVE-2016-15058
Hirschmann HiLCOS Classic Platform Password Exposure via SNM
V. Comments for CVE-2024-3543
No comments yet