CVE-2024-43693: critical vulnerability in Dover Fueling Solutions (DFS) ProGauge MAGLINK…
Dover Fueling Solutions ProGauge MAGLINK LX CONSOLE Command Injection
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
28Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 10epss 0.8%
A specially crafted POST request to the ProGauge MAGLINK LX CONSOLE
UTILITY sub-menu can allow a remote attacker to inject arbitrary
commands.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Affected products
Dover Fueling Solutions (DFS) · ProGauge MAGLINK LX4 CONSOLEDover Fueling Solutions (DFS) · ProGauge MAGLINK LX CONSOLERelated CVEs — Dover Fueling Solutions (DFS) ProGauge MAGLINK…
In the same product, most dangerous first.
CVE-2024-45066CRITICALDover Fueling Solutions ProGauge MAGLINK LX CONSOLE Command InjectionEPSS 0.8%CVE-2024-43423CRITICALDover Fueling Solutions ProGauge MAGLINK LX CONSOLE Use of Hard-coded PasswordEPSS 0.7%CVE-2024-43692CRITICALDover Fueling Solutions ProGauge MAGLINK LX CONSOLE Authentication Bypass Using an Alternate Path or ChannelEPSS 0.5%CVE-2024-45373HIGHDover Fueling Solutions ProGauge MAGLINK LX CONSOLE Improper Privilege ManagementEPSS 0.4%CVE-2024-41725HIGHDover Fueling Solutions ProGauge MAGLINK LX CONSOLE Cross-site ScriptingEPSS 0.4%