PT-2024-31413 · Unknown · Progauge Maglink Lx Console

Pedro Umbelino · Published 2024-09-24 · Updated 2024-11-07 · CVE-2024-45066

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ProGauge MAGLINK LX CONSOLE (affected versions not specified)

Description A specially crafted POST request to the "ProGauge MAGLINK LX CONSOLE IP sub-menu" can allow a remote attacker to inject arbitrary commands. This issue is being actively exploited. The vulnerability affects Automated Tank Gauge (ATG) systems, which are crucial for managing fuel storage tanks in critical infrastructure sectors.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

CVE-2024-45066

Affected Products

Progauge Maglink Lx Console

References · 12

• https://osv.dev/vulnerability/CVE-2024-45066 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-45066 · Security Note
• https://twitter.com/transilienceai/status/1843837055240974683 · Twitter Post
• https://twitter.com/CVEnew/status/1838747983308796037 · Twitter Post
• https://cisa.gov/news-events/ics-advisories/icsa-24-268-04 · Note
• https://t.me/echeloneyes/3232 · Telegram Post
• https://twitter.com/fletch_ai/status/1854041177961709612 · Twitter Post
• https://twitter.com/transilienceai/status/1845455479608311919 · Twitter Post
• https://twitter.com/cracbot/status/1840632741525922254 · Twitter Post
• https://twitter.com/CveFindCom/status/1838730542860173351 · Twitter Post
• https://twitter.com/Eth1calHackrZ/status/1841810439447150698 · Twitter Post
• https://twitter.com/fletch_ai/status/1854339733910065275 · Twitter Post