Doverfuelingsolutions

9 CVEs across 6 Doverfuelingsolutions products. Browse Doverfuelingsolutions vulnerabilities, severities, and proof-of-concept exploits.

Doverfuelingsolutions products with known CVEs

ProductCVEs
Progauge Maglink Lx4 Console6
Progauge Maglink Lx4 Console Firmware6
Progauge Maglink Lx Console6
Progauge Maglink Lx Console Firmware6
Maglink Lx 33
Maglink Lx Web Console Configuration3
Doverfuelingsolutions CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2024-45373High8.82024-09-25Once logged in to ProGauge MAGLINK LX4 CONSOLE, a valid user can change their privileges to administrator.
CVE-2024-45066Critical10.02024-09-25A specially crafted POST request to the ProGauge MAGLINK LX CONSOLE IP sub-menu can allow a remote attacker to inject arbitrary commands.
CVE-2024-43693Critical10.02024-09-25A specially crafted POST request to the ProGauge MAGLINK LX CONSOLE UTILITY sub-menu can allow a remote attacker to inject arbitrary commands.
CVE-2024-43692Critical9.82024-09-25An attacker can directly request the ProGauge MAGLINK LX CONSOLE resource sub page with full privileges by requesting the URL directly.
CVE-2024-43423Critical9.82024-09-25The web application for ProGauge MAGLINK LX4 CONSOLE contains an administrative-level user account with a password that cannot be changed.
CVE-2024-41725High8.82024-09-25ProGauge MAGLINK LX CONSOLE does not have sufficient filtering on input fields that are used to render pages which may allow cross site scripting.
CVE-2023-38256Medium6.82023-09-11Dover Fueling Solutions MAGLINK LX Web Console Configuration versions 2.5.1, 2.5.2, 2.5.3, 2.6.1, 2.11, 3.0, 3.2, and 3.3 vulnerable to a path traversal atta…
CVE-2023-36497High8.82023-09-11Dover Fueling Solutions MAGLINK LX Web Console Configuration versions 2.5.1, 2.5.2, 2.5.3, 2.6.1, 2.11, 3.0, 3.2, and 3.3 could allow a guest user to elevate…
CVE-2023-41256Critical9.12023-09-11 Dover Fueling Solutions MAGLINK LX Web Console Configuration versions 2.5.1, 2.5.2, 2.5.3, 2.6.1, 2.11, 3.0, 3.2, and 3.3 are vulnerable to authentication byp…