CVEvulnerability
CVE-2023-41256
9.1 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2023-09-11
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.1 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
- CVSS 3.1 ([email protected])
- 9.1 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
- Weaknesses
- CWE-288
Description
Dover Fueling Solutions MAGLINK LX Web Console Configuration versions 2.5.1, 2.5.2, 2.5.3, 2.6.1, 2.11, 3.0, 3.2, and 3.3 are vulnerable to authentication bypass that could allow an unauthorized attacker to obtain user access.
Affected configurations
• doverfuelingsolutions maglink lx web console configuration 2.5.1
• doverfuelingsolutions maglink lx web console configuration 2.5.2
• doverfuelingsolutions maglink lx web console configuration 2.5.3
• doverfuelingsolutions maglink lx web console configuration 2.6.1
• doverfuelingsolutions maglink lx web console configuration 2.11
• doverfuelingsolutions maglink lx web console configuration 3.0
• doverfuelingsolutions maglink lx web console configuration 3.2
• doverfuelingsolutions maglink lx web console configuration 3.3
Related
Weakness · CWE (1)
- CWE-288 Authentication Bypass Using an Alternate Path or Channel weakness
References
- https://www.cisa.gov/news-events/ics-advisories/icsa-23-250-01 Third Party Advisory, US Government Resource
- https://www.cisa.gov/news-events/ics-advisories/icsa-23-250-01 Third Party Advisory, US Government Resource