Code injection

2023-09-1120:15:00

PRIOn knowledge base

www.prio-n.com

injection

security vulnerability

privilege escalation

web console

configuration

8.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.4%

JSON

Dover Fueling Solutions MAGLINK LX Web Console Configuration versions 2.5.1, 2.5.2, 2.5.3, 2.6.1, 2.11, 3.0, 3.2, and 3.3

could allow a guest user to elevate to admin privileges.

CPENameOperatorVersion
maglink_lx_web_console_configurationeq2.5.1
maglink_lx_web_console_configurationeq2.5.2
maglink_lx_web_console_configurationeq2.5.3
maglink_lx_web_console_configurationeq2.6.1
maglink_lx_web_console_configurationeq2.11
maglink_lx_web_console_configurationeq3.0
maglink_lx_web_console_configurationeq3.2
maglink_lx_web_console_configurationeq3.3

Name	Operator	Version
maglink_lx_web_console_configuration	eq	2.5.1
maglink_lx_web_console_configuration	eq	2.5.2
maglink_lx_web_console_configuration	eq	2.5.3
maglink_lx_web_console_configuration	eq	2.6.1
maglink_lx_web_console_configuration	eq	2.11
maglink_lx_web_console_configuration	eq	3.0
maglink_lx_web_console_configuration	eq	3.2
maglink_lx_web_console_configuration	eq	3.3

References

www.cisa.gov/news-events/ics-advisories/icsa-23-250-01