CVE-2024-43693: Improper Neutralization of Special Elements used in a Command

A specially crafted POST request to the ProGauge MAGLINK LX CONSOLE UTILITY sub-menu can allow a remote attacker to inject arbitrary commands...

CVE-2024-45373: Improper Privilege Management

Once logged in to ProGauge MAGLINK LX4 CONSOLE, a valid user can change their privileges to administrator...

Dover Fueling Solutions ProGauge MAGLINK LX CONSOLE: Command Injection Vulnerability

The Dover Fueling Solutions ProGauge MAGLINK LX CONSOLE DFS ProGauge MAGLINK LX CONSOLE is an industrial console from Dover Fueling Solutions, Inc. designed for expansion. A command injection vulnerability exists in Dover Fueling Solutions ProGauge MAGLINK LX CONSOLE 3.4.2.2.6 and prior versions,...

Dover Fueling Solutions ProGauge MAGLINK LX CONSOLE security vulnerabilities

The Dover Fueling Solutions ProGauge MAGLINK LX CONSOLE DFS ProGauge MAGLINK LX CONSOLE is an industrial console from Dover Fueling Solutions, USA, designed for expansion. A security vulnerability exists in the Dover Fueling Solutions ProGauge MAGLINK LX CONSOLE that stems from the web applicatio...

IBM Aspera Console security vulnerability

IBM Aspera Console is a Web-based application from International Business Machines IBM, Inc. Allows users to centrally manage, monitor and control Aspera servers nodes and transports. A security vulnerability exists in IBM Aspera Console versions 3.4.0 through 3.4.4 that originates from CSV...

IBM Aspera Console security vulnerability

IBM Aspera Console is a Web-based application from International Business Machines IBM, Inc. Allows users to centrally manage, monitor and control Aspera servers nodes and transports. A security vulnerability exists in IBM Aspera Console versions 3.4.0 through 3.4.4 that stems from a failure to s...

Dover Fueling Solutions ProGauge MAGLINK LX CONSOLER has a cross-site scripting vulnerability

The Dover Fueling Solutions ProGauge MAGLINK LX CONSOLE DFS ProGauge MAGLINK LX CONSOLE is an industrial console from Dover Fueling Solutions, Inc. designed for expansion. A cross-site scripting vulnerability exists in the Dover Fueling Solutions ProGauge MAGLINK LX CONSOLE that stems from...

CVE-2024-43423: Use of Hard-coded Password

The web application for ProGauge MAGLINK LX4 CONSOLE contains an administrative-level user account with a password that cannot be changed...

CVE-2024-43692: Authentication Bypass Using an Alternate Path or Channel

An attacker can directly request the ProGauge MAGLINK LX CONSOLE resource sub page with full privileges by requesting the URL directly...

CVE-2024-45066: Improper Neutralization of Special Elements used in a Command

A specially crafted POST request to the ProGauge MAGLINK LX CONSOLE IP sub-menu can allow a remote attacker to inject arbitrary commands...

CVE-2021-38963: Improper Neutralization of Formula Elements in a CSV File

IBM Aspera Console 3.4.0 through 3.4.4 could allow a remote authenticated attacker to execute arbitrary code on the system, caused by a CSV injection vulnerability. By persuading a victim to open a specially crafted file, an attacker could exploit this vulnerability to execute arbitrary code on t...

CVE-2024-41725: Improper Neutralization of Input During Web Page Generation

ProGauge MAGLINK LX CONSOLE does not have sufficient filtering on input fields that are used to render pages which may allow cross site scripting...

Dover Fueling Solutions ProGauge MAGLINK LX CONSOLE security vulnerabilities

The Dover Fueling Solutions ProGauge MAGLINK LX CONSOLE DFS ProGauge MAGLINK LX CONSOLE is an industrial console from Dover Fueling Solutions, USA, designed for expansion. A security vulnerability exists in Dover Fueling Solutions ProGauge MAGLINK LX CONSOLE version 4.17.9e and prior versions,...

CVE-2024-45066 Dover Fueling Solutions ProGauge MAGLINK LX CONSOLE Command Injection

A specially crafted POST request to the ProGauge MAGLINK LX CONSOLE IP sub-menu can allow a remote attacker to inject arbitrary commands...

CVE-2024-45066 Dover Fueling Solutions ProGauge MAGLINK LX CONSOLE Command Injection

A specially crafted POST request to the ProGauge MAGLINK LX CONSOLE IP sub-menu can allow a remote attacker to inject arbitrary commands...

CVE-2024-43693

The CVE-2024-43693 vulnerability affects Dover Fueling Solutions ProGauge MAGLINK LX CONSOLE (and related LX4 variants) where a specially crafted POST request to the CONSOLE UTILITY sub-menu enables remote command injection. This is a network‑reachable flaw with low attack complexity and no user ...

CVE-2024-43693 Dover Fueling Solutions ProGauge MAGLINK LX CONSOLE Command Injection

A specially crafted POST request to the ProGauge MAGLINK LX CONSOLE UTILITY sub-menu can allow a remote attacker to inject arbitrary commands...

CVE-2024-43692

The CVE-2024-43692 issue affects Dover Fueling Solutions ProGauge MAGLINK LX CONSOLE (and LX4) where an attacker can directly request a resource sub page to obtain full privileges, effectively bypassing authentication. Affected: MAGLINK LX CONSOLE (versions up to 3.4.2.2.6) and MAGLINK LX4 CONSOL...

CVE-2024-43692 Dover Fueling Solutions ProGauge MAGLINK LX CONSOLE Authentication Bypass Using an Alternate Path or Channel

An attacker can directly request the ProGauge MAGLINK LX CONSOLE resource sub page with full privileges by requesting the URL directly...

CVE-2024-41725

The CVE-2024-41725 affects Dover Fueling Solutions ProGauge MAGLINK LX CONSOLE (and MAGLINK LX4). The issue is Cross-site Scripting due to insufficient filtering of input fields used to render pages. Affected versions: MAGLINK LX CONSOLE ≤ 3.4.2.2.6 and MAGLINK LX4 CONSOLE ≤ 4.17.9e. Technical de...