by Kastro
Paper/Archive/CVE-2023-41256

CVE-2023-41256

Dover Fueling Solutions MAGLINK LX Web Console Configuration — Dover Fueling Solutions MAGLINK LX Console Authentication Bypass

EPSS 0.9%CVSS 9.1
critical.is priorityof 100
39
CVSS 9.1 (CNA, NVD agree)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 60.5.605 × 2012.1No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Dover Fueling Solutions MAGLINK LX Web Console Configuration versions 2.5.1, 2.5.2, 2.5.3, 2.6.1, 2.11, 3.0, 3.2, and 3.3 are vulnerable to authentication bypass that could allow an unauthorized attacker to obtain user access.

Affected

ProductAffectedFixed inSource
MAGLINK LX Web Console Configuration2.5.1–CNA
MAGLINK LX Web Console Configuration2.5.2–CNA
MAGLINK LX Web Console Configuration2.5.3–CNA
MAGLINK LX Web Console Configuration2.6.1–CNA
MAGLINK LX Web Console Configuration2.11–CNA
MAGLINK LX Web Console Configuration3.0–CNA
MAGLINK LX Web Console Configuration3.2–CNA
MAGLINK LX Web Console Configuration3.3–CNA

Scores by source

icscert (CNA)9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refcisa.gov/news-events/ics-advisories/icsa-23-250-01