CVE-2024-45066

A specially crafted POST request to the ProGauge MAGLINK LX CONSOLE IPsub-menu can allow a remote attacker to inject arbitrary commands.

CVE-2024-43423

The web application for ProGauge MAGLINK LX4 CONSOLE contains anadministrative-level user account with a password that cannot bechanged.

CVE-2024-41725

ProGauge MAGLINK LX CONSOLE does not have sufficient filtering on inputfields that are used to render pages which may allow cross sitescripting.

CVE-2024-43693

A specially crafted POST request to the ProGauge MAGLINK LX CONSOLEUTILITY sub-menu can allow a remote attacker to inject arbitrarycommands.

CVE-2024-43692

An attacker can directly request the ProGauge MAGLINK LX CONSOLEresource sub page with full privileges by requesting the URL directly.

CVE-2024-45373

Once logged in to ProGauge MAGLINK LX4 CONSOLE, a valid user can change their privileges to administrator.