Multi-Tenant LoadMaster MT_7.1.35 Release Notes
Refer to the sections below for details about firmware version MT_7.1.35. This was released on 2nd August 2016.
Note: When upgrading a Multi-Tenant LoadMaster for Microsoft Azure to firmware version 7.1.35 – you also need to upgrade the Azure add-on pack.
It is now possible to retrieve the serial number of a Multi-Tenant LoadMaster using the Application Program Interface (API).
Fixed an issue which was causing the interface speed to not be displayed correctly in the Multi-Tenant LoadMaster Web User Interface (WUI).
A critical vulnerability (CVE-2018-9091) in the Multi-Tenant LoadMaster Operating System (MT-LMOS) related to Session Management could allow an unauthorized, remote attacker to bypass security protections, gain system privileges, and execute elevated commands such as ls, ps, cat, and so on, thereby compromising the system. Through this remote execution, in certain cases, exposure of sensitive system data such as certificates, private keys, and other information may be possible.
Further information can be found here: Mitigation For Remote Access Execution Vulnerability.