Dover Fueling Solutions Progauge Maglink Lx4 Console vulnerabilities

CVE-2024-45066 [CRITICAL] CWE-77 CVE-2024-45066: A specially crafted POST request to the ProGauge MAGLINK LX CONSOLE IP sub-menu can allow a remote A specially crafted POST request to the ProGauge MAGLINK LX CONSOLE IP sub-menu can allow a remote attacker to inject arbitrary commands.

CVE-2024-43693 [CRITICAL] CWE-77 CVE-2024-43693: A specially crafted POST request to the ProGauge MAGLINK LX CONSOLE UTILITY sub-menu can allow a re A specially crafted POST request to the ProGauge MAGLINK LX CONSOLE UTILITY sub-menu can allow a remote attacker to inject arbitrary commands.

CVE-2024-43423 [CRITICAL] CWE-259 CVE-2024-43423: The web application for ProGauge MAGLINK LX4 CONSOLE contains an administrative-level user account The web application for ProGauge MAGLINK LX4 CONSOLE contains an administrative-level user account with a password that cannot be changed.

CVE-2024-43692 [CRITICAL] CWE-288 CVE-2024-43692: An attacker can directly request the ProGauge MAGLINK LX CONSOLE resource sub page with full privil An attacker can directly request the ProGauge MAGLINK LX CONSOLE resource sub page with full privileges by requesting the URL directly.

CVE-2024-45373 [HIGH] CWE-269 CVE-2024-45373: Once logged in to ProGauge MAGLINK LX4 CONSOLE, a valid user can change their privileges to administ Once logged in to ProGauge MAGLINK LX4 CONSOLE, a valid user can change their privileges to administrator.

CVE-2024-41725 [MEDIUM] CWE-79 CVE-2024-41725: ProGauge MAGLINK LX CONSOLE does not have sufficient filtering on input fields that are used to ren ProGauge MAGLINK LX CONSOLE does not have sufficient filtering on input fields that are used to render pages which may allow cross site scripting.