PT-2023-5113 · Dover Fueling Solutions · Maglink Lx Web Console

Published 2023-09-07 · Updated 2024-10-01 · CVE-2023-41256

Positive Technologies (AI Summary)

CVSS v2.0

9.4

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:N

Name of the Vulnerable Software and Affected Versions Dover Fueling Solutions MAGLINK LX Web Console Configuration versions 2.5.1 through 3.3

Description The vulnerability in the MAGLINK LX Web Console is related to authentication bypass, which could allow an unauthorized attacker to obtain user access by using an alternative path or channel. This issue may enable a remote attacker to gain full access to the system.

Recommendations For versions 2.5.1 through 3.3, update to a version that includes a fix for the authentication bypass issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Authentication Bypass Using an Alternate Path or Channel

Weakness Enumeration

CWE-288

Related Identifiers

BDU:2023-05689

CVE-2023-41256

Affected Products

Maglink Lx Web Console

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2023-41256 · Security Note
• https://bdu.fstec.ru/vul/2023-05689 · Security Note
• https://osv.dev/vulnerability/CVE-2023-41256 · Vendor Advisory
• https://cisa.gov/news-events/ics-advisories/icsa-23-250-01 · Note
• https://t.me/cibsecurity/70218 · Telegram Post
• https://twitter.com/csirt_global/status/1699846910784196792 · Twitter Post
• https://twitter.com/CVEnew/status/1701312809651278016 · Twitter Post
• https://twitter.com/cracbot/status/1701475787524984956 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1701335553436774784 · Twitter Post
• https://t.me/echeloneyes/3232 · Telegram Post