Approved changes feed: RSS · Atom

cpe:2.3:a:doverfuelingsolutions:maglink_lx_console:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorDoverfuelingsolutions (54344b86-c667-5b6e-bd13-c9f2a4a682f7)
ProductMaglink Lx Console (55fffd00-c7c9-5eff-81fd-083d5aed1bd0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-45373 vulnerable 2026-06-08 06:48:05.991826 Dover Fueling Solutions ProGauge MAGLINK LX CONSOLE Improper Privilege Management
HIGH (8.8)
Once logged in to ProGauge MAGLINK LX4 CONSOLE, a valid user can change their privileges to administrator.
Published: 2024-09-24T23:48:40.625Z
Updated: 2024-09-25T16:57:09.490Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45066 vulnerable 2026-06-08 06:45:54.507018 Dover Fueling Solutions ProGauge MAGLINK LX CONSOLE Command Injection
CRITICAL (10)
A specially crafted POST request to the ProGauge MAGLINK LX CONSOLE IP sub-menu can allow a remote attacker to inject arbitrary commands.
Published: 2024-09-24T23:51:02.029Z
Updated: 2024-09-25T16:54:10.381Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-43693 vulnerable 2026-06-08 06:45:52.877121 Dover Fueling Solutions ProGauge MAGLINK LX CONSOLE Command Injection
CRITICAL (10)
A specially crafted POST request to the ProGauge MAGLINK LX CONSOLE UTILITY sub-menu can allow a remote attacker to inject arbitrary commands.
Published: 2024-09-24T23:50:10.531Z
Updated: 2024-09-25T16:55:33.557Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-43692 vulnerable 2026-06-08 06:45:52.876048 Dover Fueling Solutions ProGauge MAGLINK LX CONSOLE Authentication Bypass Using an Alternate Path or Channel
CRITICAL (9.8)
An attacker can directly request the ProGauge MAGLINK LX CONSOLE resource sub page with full privileges by requesting the URL directly.
Published: 2024-09-24T23:46:12.640Z
Updated: 2024-09-25T17:00:19.138Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-43423 vulnerable 2026-06-08 06:45:50.732332 Dover Fueling Solutions ProGauge MAGLINK LX CONSOLE Use of Hard-coded Password
CRITICAL (9.8)
The web application for ProGauge MAGLINK LX4 CONSOLE contains an administrative-level user account with a password that cannot be changed.
Published: 2024-09-24T23:47:27.964Z
Updated: 2024-09-25T16:58:34.484Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41725 vulnerable 2026-06-08 06:43:55.007072 Dover Fueling Solutions ProGauge MAGLINK LX CONSOLE Cross-site Scripting
HIGH (8.8)
ProGauge MAGLINK LX CONSOLE does not have sufficient filtering on input fields that are used to render pages which may allow cross site scripting.
Published: 2024-09-24T23:44:04.492Z
Updated: 2024-09-25T17:01:33.873Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.