Export CSV

Products

1 vendor
VendorProductsCVEsKEVAvg EPSSWorst Severity
39043.7%CRITICAL

Related CVEs

9
CVE IDDescriptionSeverityCVSSKEVEPSSPublished
CVE-2024-45373Once logged in to ProGauge MAGLINK LX4 CONSOLE, a valid user can change their privileges to administrator.HIGH8.736.1%Sep 25, 2024
CVE-2024-45066A specially crafted POST request to the ProGauge MAGLINK LX CONSOLE IP sub-menu can allow a remote attacker to inject arbitrary commands.CRITICAL10.051.8%Sep 25, 2024
CVE-2024-43693A specially crafted POST request to the ProGauge MAGLINK LX CONSOLE UTILITY sub-menu can allow a remote attacker to inject arbitrary commands.CRITICAL10.051.8%Sep 25, 2024
CVE-2024-43692An attacker can directly request the ProGauge MAGLINK LX CONSOLE resource sub page with full privileges by requesting the URL directly.CRITICAL9.339.7%Sep 25, 2024
CVE-2024-43423The web application for ProGauge MAGLINK LX4 CONSOLE contains an administrative-level user account with a password that cannot be changed.CRITICAL9.348.1%Sep 25, 2024
CVE-2024-41725ProGauge MAGLINK LX CONSOLE does not have sufficient filtering on input fields that are used to render pages which may allow cross site scripting.HIGH8.727.1%Sep 25, 2024
CVE-2023-38256Dover Fueling Solutions MAGLINK LX Web Console Configuration versions 2.5.1, 2.5.2, 2.5.3, 2.6.1, 2.11, 3.0, 3.2, and 3.3 vulnerable to a path traversal attack, which could allow an attacker to access files stored on the system. HIGH7.543.1%Sep 11, 2023
CVE-2023-36497Dover Fueling Solutions MAGLINK LX Web Console Configuration versions 2.5.1, 2.5.2, 2.5.3, 2.6.1, 2.11, 3.0, 3.2, and 3.3 could allow a guest user to elevate to admin privileges.HIGH8.839.9%Sep 11, 2023
CVE-2023-41256 Dover Fueling Solutions MAGLINK LX Web Console Configuration versions 2.5.1, 2.5.2, 2.5.3, 2.6.1, 2.11, 3.0, 3.2, and 3.3 are vulnerable to authentication bypass that could allow an unauthorized attacker to obtain user access. CRITICAL9.150.1%Sep 11, 2023