Lucene search
IcscertCVELIST:CVE-2023-38256HistorySep 11, 2023 - 7:34 p.m.
CVE-2023-38256 Dover Fueling Solutions MAGLINK LX Console Path Traversal
2023-09-1119:34:11
CWE-22
icscert
www.cve.org
dover fueling solutions
maglink lx
web console configuration
path traversal
cve-2023-38256
file access
6.8 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
0.001 Low
EPSS
Percentile
38.8%
Dover Fueling Solutions MAGLINK LX Web Console Configuration versions 2.5.1, 2.5.2, 2.5.3, 2.6.1, 2.11, 3.0, 3.2, and 3.3
vulnerable to a path traversal attack, which could allow an attacker to access files stored on the system.
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "MAGLINK LX Web Console Configuration",
"vendor": "Dover Fueling Solutions",
"versions": [
{
"status": "affected",
"version": "2.5.1"
},
{
"status": "affected",
"version": "2.5.2"
},
{
"status": "affected",
"version": "2.5.3"
},
{
"status": "affected",
"version": "2.6.1"
},
{
"status": "affected",
"version": "2.11"
},
{
"status": "affected",
"version": "3.0"
},
{
"status": "affected",
"version": "3.2"
},
{
"status": "affected",
"version": "3.3"
}
]
}
]Related
nvd
nvd
CVE-2023-38256
2023-09-11 20:15:09
prion
prion
Path traversal
2023-09-11 20:15:00
cve
cve
CVE-2023-38256
2023-09-11 20:15:09
ics
ics
Dover Fueling Solutions MAGLINK LX Console
2023-09-07 12:00:00
6.8 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
0.001 Low
EPSS
Percentile
38.8%
Related for CVELIST:CVE-2023-38256