title: Dover Fueling Solutions MAGLINK LX Console Authentication Bypass
description:
Dover Fueling Solutions MAGLINK LX Web Console Configuration versions 2.5.1, 2.5.2, 2.5.3, 2.6.1, 2.11, 3.0, 3.2, and 3.3 are vulnerable to authentication bypass that could allow an unauthorized attacker to obtain user access.
problem types: CWE-288 Authentication Bypass Using an Alternate Path or Channel
affected:
{
defaultStatus: unaffected
product: MAGLINK LX Web Console Configuration
vendor: Dover Fueling Solutions
versions:
status: affected, version: 2.5.1
status: affected, version: 2.5.2
status: affected, version: 2.5.3
status: affected, version: 2.6.1
status: affected, version: 2.11
status: affected, version: 3.0
status: affected, version: 3.2
status: affected, version: 3.3
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 9.1
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
version: 3.1
]
format: CVSS
scenarios: GENERAL
solutions:
In 2023, Dover Fueling Solutions announced end-of-life for MAGLINK LX 3 and released MAGLINK LX 4. However, MAGLINK LX 3 version 3.4.2.2.6 and MAGLINK LX 4 fixes these vulnerabilities.