Path traversal

2023-09-1120:15:00

PRIOn knowledge base

www.prio-n.com

path traversal attack

file access

system vulnerability

web console configuration.

7.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.8%

JSON

Dover Fueling Solutions MAGLINK LX Web Console Configuration versions 2.5.1, 2.5.2, 2.5.3, 2.6.1, 2.11, 3.0, 3.2, and 3.3

vulnerable to a path traversal attack, which could allow an attacker to access files stored on the system.

CPENameOperatorVersion
maglink_lx_web_console_configurationeq2.5.1
maglink_lx_web_console_configurationeq2.5.2
maglink_lx_web_console_configurationeq2.5.3
maglink_lx_web_console_configurationeq2.6.1
maglink_lx_web_console_configurationeq2.11
maglink_lx_web_console_configurationeq3.0
maglink_lx_web_console_configurationeq3.2
maglink_lx_web_console_configurationeq3.3

Name	Operator	Version
maglink_lx_web_console_configuration	eq	2.5.1
maglink_lx_web_console_configuration	eq	2.5.2
maglink_lx_web_console_configuration	eq	2.5.3
maglink_lx_web_console_configuration	eq	2.6.1
maglink_lx_web_console_configuration	eq	2.11
maglink_lx_web_console_configuration	eq	3.0
maglink_lx_web_console_configuration	eq	3.2
maglink_lx_web_console_configuration	eq	3.3

References

www.cisa.gov/news-events/ics-advisories/icsa-23-250-01