CVE-2024-43692: critical vulnerability in Dover Fueling Solutions (DFS) ProGauge MAGLINK…
Dover Fueling Solutions ProGauge MAGLINK LX CONSOLE Authentication Bypass Using an Alternate Path or Channel
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
28Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 9.3epss 0.5%
An attacker can directly request the ProGauge MAGLINK LX CONSOLE
resource sub page with full privileges by requesting the URL directly.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
Dover Fueling Solutions (DFS) · ProGauge MAGLINK LX4 CONSOLEDover Fueling Solutions (DFS) · ProGauge MAGLINK LX CONSOLERelated CVEs — Dover Fueling Solutions (DFS) ProGauge MAGLINK…
In the same product, most dangerous first.
CVE-2024-45066CRITICALDover Fueling Solutions ProGauge MAGLINK LX CONSOLE Command InjectionEPSS 0.8%CVE-2024-43693CRITICALDover Fueling Solutions ProGauge MAGLINK LX CONSOLE Command InjectionEPSS 0.8%CVE-2024-43423CRITICALDover Fueling Solutions ProGauge MAGLINK LX CONSOLE Use of Hard-coded PasswordEPSS 0.7%CVE-2024-45373HIGHDover Fueling Solutions ProGauge MAGLINK LX CONSOLE Improper Privilege ManagementEPSS 0.4%CVE-2024-41725HIGHDover Fueling Solutions ProGauge MAGLINK LX CONSOLE Cross-site ScriptingEPSS 0.4%