CVE-2024-43692

Dover Fueling Solutions ProGauge MAGLINK LX CONSOLE Authentication Bypass Using an Alternate Path or Channel

State: Published
Severity: 9.3 Critical
Published: Sep 24, 2024
Updated: Sep 25, 2024
Reserved: Sep 5, 2024

Description

An attacker can directly request the ProGauge MAGLINK LX CONSOLE resource sub page with full privileges by requesting the URL directly.

Scores

CVSS	Score	Vector	Source
4.0	9.3 Critical	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N	icscert
3.1	9.8 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	icscert

Weaknesses

CWE-288

Affected Products

Product	Versions
ProGauge MAGLINK LX CONSOLEDover Fueling Solutions (DFS)	3.4.2.2.6 and earlierAffected
ProGauge MAGLINK LX4 CONSOLEDover Fueling Solutions (DFS)	4.17.9e and earlierAffected

References

https://www.cisa.gov/news-events/ics-advisories/icsa-24-268-04

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.