Skip to content
OpenAdvisories
Critical ICSA-23-250-01 3 CVEs

Dover Fueling Solutions MAGLINK LX Console

Published Sep 7, 2023 · Updated Sep 7, 2023

Vendor: Dover Fueling Solutions Product: MAGLINK LX Web Console Configuration

Summary

Successful exploitation of these vulnerabilities could allow an attacker to gain full access to the system.

Vulnerabilities 3

  • Critical 9.1
    CVE-2023-41256

    Dover Fueling Solutions MAGLINK LX Console Authentication Bypass

    Dover Fueling Solutions MAGLINK LX Web Console Configuration versions 2.5.1, 2.5.2, 2.5.3, 2.6.1, 2.11, 3.0, 3.2, and 3.3 are vulnerable to authentication bypass that could allow an unauthorized attacker to obtain user access.

    Dover Fueling Solutions MAGLINK LX Web Console Configuration
  • High 8.8
    CVE-2023-36497

    Dover Fueling Solutions MAGLINK LX Web Console Authentication Bypass by Primary Weakness

    Dover Fueling Solutions MAGLINK LX Web Console Configuration versions 2.5.1, 2.5.2, 2.5.3, 2.6.1, 2.11, 3.0, 3.2, and 3.3 could allow a guest user to elevate to admin privileges.

    Dover Fueling Solutions MAGLINK LX Web Console Configuration
  • Medium 6.8
    CVE-2023-38256

    Dover Fueling Solutions MAGLINK LX Console Path Traversal

    Dover Fueling Solutions MAGLINK LX Web Console Configuration versions 2.5.1, 2.5.2, 2.5.3, 2.6.1, 2.11, 3.0, 3.2, and 3.3 vulnerable to a path traversal attack, which could allow an attacker to access files stored on the system.

    Dover Fueling Solutions MAGLINK LX Web Console Configuration

Revision history

  1. #1

    Initial Publication

References