CVE-2023-38256
published 2023-09-11CVE-2023-38256: Dover Fueling Solutions MAGLINK LX Web Console Configuration versions 2.5.1, 2.5.2, 2.5.3, 2.6.1, 2.11, 3.0, 3.2, and 3.3 vulnerable to a path traversal…
PriorityP348high7.5CVSS 3.1
AVNACLPRNUINSUCHINAN
EPSS
0.57%
43.1th percentile
Dover Fueling Solutions MAGLINK LX Web Console Configuration versions 2.5.1, 2.5.2, 2.5.3, 2.6.1, 2.11, 3.0, 3.2, and 3.3
vulnerable to a path traversal attack, which could allow an attacker to access files stored on the system.
Affected
16 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| dover_fueling_solutions | maglink_lx_web_console_configuration | — | — |
| dover_fueling_solutions | maglink_lx_web_console_configuration | — | — |
| dover_fueling_solutions | maglink_lx_web_console_configuration | — | — |
| dover_fueling_solutions | maglink_lx_web_console_configuration | — | — |
| dover_fueling_solutions | maglink_lx_web_console_configuration | — | — |
| dover_fueling_solutions | maglink_lx_web_console_configuration | — | — |
| dover_fueling_solutions | maglink_lx_web_console_configuration | — | — |
| dover_fueling_solutions | maglink_lx_web_console_configuration | — | — |
| doverfuelingsolutions | maglink_lx_web_console_configuration | — | — |
| doverfuelingsolutions | maglink_lx_web_console_configuration | — | — |
| doverfuelingsolutions | maglink_lx_web_console_configuration | — | — |
| doverfuelingsolutions | maglink_lx_web_console_configuration | — | — |
| doverfuelingsolutions | maglink_lx_web_console_configuration | — | — |
| doverfuelingsolutions | maglink_lx_web_console_configuration | — | — |
| doverfuelingsolutions | maglink_lx_web_console_configuration | — | — |
| doverfuelingsolutions | maglink_lx_web_console_configuration | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
CISA ICS
Dover Fueling Solutions MAGLINK LX Console
cisa_ics·2023-09-07·CVSS 8.8
[HIGH] Dover Fueling Solutions MAGLINK LX Console
ICS Advisory
##
Dover Fueling Solutions MAGLINK LX Console
Release DateSeptember 07, 2023
Alert CodeICSA-23-250-01
## 1. EXECUTIVE SUMMARY
- CVSS v3 9.1
- ATTENTION: Exploitable remotely/low attack complexity
- Vendor: Dover Fueling Solutions
- Equipment: MAGLINK LX - Web Console Configuration
- Vulnerabilities: Authentication Bypass using an Alternate Path or Channel, Authentication Bypass by Primary Weakness, Path Traversal
## 2. RISK EVALUATION
Successful exploitation of these vulnerabilities could allow an attacker to gain full access to the system.
## 3. TECHNICAL DETAILS
## 3.1 AFFECTED PRODUCTS
The following versions of MAGLINK LX Web Console Configuration are affected:
- MAGLINK LX Web Console Configuration: version 2.5.1
- MAGLINK LX Web Conso
GHSA
GHSA-v9pp-9cj8-m83p: Dover Fueling Solutions MAGLINK LX Web Console Configuration versions 2
ghsa_unreviewed·2023-09-11
CVE-2023-38256 [HIGH] CWE-22 GHSA-v9pp-9cj8-m83p: Dover Fueling Solutions MAGLINK LX Web Console Configuration versions 2
Dover Fueling Solutions MAGLINK LX Web Console Configuration versions 2.5.1, 2.5.2, 2.5.3, 2.6.1, 2.11, 3.0, 3.2, and 3.3
vulnerable to a path traversal attack, which could allow an attacker to access files stored on the system.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2023-09-11
Published