Skip to content
OpenAdvisories
Critical · 9.8 CVE-2024-43692 EUVD-2024-40427GHSA-x4p5-53p5-3j33

Dover Fueling Solutions ProGauge MAGLINK LX CONSOLE Authentication Bypass Using an Alternate Path or Channel

Published Sep 24, 2024 · Updated Sep 25, 2024 · Assigned by icscert

Vendor: Dover Fueling Solutions (DFS) Product: ProGauge MAGLINK LX CONSOLE Product: ProGauge MAGLINK LX4 CONSOLE

Description

An attacker can directly request the ProGauge MAGLINK LX CONSOLE
resource sub page with full privileges by requesting the URL directly.

Affected products

VendorProductAffectedFixed
Dover Fueling Solutions (DFS) ProGauge MAGLINK LX CONSOLE ≤ 3.4.2.2.6 —
Dover Fueling Solutions (DFS) ProGauge MAGLINK LX4 CONSOLE ≤ 4.17.9e —

Advisories 1

References