Skip to content
OpenAdvisories
Critical · 10.0 CVE-2024-43693 EUVD-2024-40428GHSA-mrxm-9rwr-qw4f

Dover Fueling Solutions ProGauge MAGLINK LX CONSOLE Command Injection

Published Sep 24, 2024 · Updated Sep 25, 2024 · Assigned by icscert

Description

A specially crafted POST request to the ProGauge MAGLINK LX CONSOLE
UTILITY sub-menu can allow a remote attacker to inject arbitrary
commands.

Affected products

VendorProductAffectedFixed
Dover Fueling Solutions (DFS) ProGauge MAGLINK LX CONSOLE ≤ 3.4.2.2.6 —
Dover Fueling Solutions (DFS) ProGauge MAGLINK LX4 CONSOLE ≤ 4.17.9e —

Advisories 1

References