Skip to content
OpenAdvisories
Critical · 10.0 CVE-2024-45066 EUVD-2024-41292GHSA-c6jq-3xcg-q498

Dover Fueling Solutions ProGauge MAGLINK LX CONSOLE Command Injection

Published Sep 24, 2024 · Updated Sep 25, 2024 · Assigned by icscert

Vendor: Dover Fueling Solutions (DFS) Product: ProGauge MAGLINK LX CONSOLE Product: ProGauge MAGLINK LX4 CONSOLE

Description

A specially crafted POST request to the ProGauge MAGLINK LX CONSOLE IP
sub-menu can allow a remote attacker to inject arbitrary commands.

Affected products

VendorProductAffectedFixed
Dover Fueling Solutions (DFS) ProGauge MAGLINK LX CONSOLE ≤ 3.4.2.2.6 —
Dover Fueling Solutions (DFS) ProGauge MAGLINK LX4 CONSOLE ≤ 4.17.9e —

Advisories 1

References