CVE-2024-43423

2024-09-2501:15:42

CWE-798

CWE-259

[email protected]

web.nvd.nist.gov

web application

progauge maglink lx4 console

administrative-level user account

unchangeable password

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

Percentile

9.6%

JSON

The web application for ProGauge MAGLINK LX4 CONSOLE contains an
administrative-level user account with a password that cannot be
changed.

Affected configurations

Nvd

Node

doverfuelingsolutionsprogauge_maglink_lx_console_firmwareRange≤3.4.2.2.6

AND

doverfuelingsolutionsprogauge_maglink_lx_consoleMatch-

Node

doverfuelingsolutionsprogauge_maglink_lx4_console_firmwareRange≤4.17.9e

AND

doverfuelingsolutionsprogauge_maglink_lx4_consoleMatch-

VendorProductVersionCPE
doverfuelingsolutionsprogauge_maglink_lx_console_firmware*cpe:2.3:o:doverfuelingsolutions:progauge_maglink_lx_console_firmware:*:*:*:*:*:*:*:*
doverfuelingsolutionsprogauge_maglink_lx_console-cpe:2.3:h:doverfuelingsolutions:progauge_maglink_lx_console:-:*:*:*:*:*:*:*
doverfuelingsolutionsprogauge_maglink_lx4_console_firmware*cpe:2.3:o:doverfuelingsolutions:progauge_maglink_lx4_console_firmware:*:*:*:*:*:*:*:*
doverfuelingsolutionsprogauge_maglink_lx4_console-cpe:2.3:h:doverfuelingsolutions:progauge_maglink_lx4_console:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
doverfuelingsolutions	progauge_maglink_lx_console_firmware	*	cpe:2.3:o:doverfuelingsolutions:progauge_maglink_lx_console_firmware::::::::
doverfuelingsolutions	progauge_maglink_lx_console	-	cpe:2.3:h:doverfuelingsolutions:progauge_maglink_lx_console:-:::::::*
doverfuelingsolutions	progauge_maglink_lx4_console_firmware	*	cpe:2.3:o:doverfuelingsolutions:progauge_maglink_lx4_console_firmware::::::::
doverfuelingsolutions	progauge_maglink_lx4_console	-	cpe:2.3:h:doverfuelingsolutions:progauge_maglink_lx4_console:-:::::::*