Dover Fueling Solutions MAGLINK LX Web Console Configuration versions 2.5.1, 2.5.2, 2.5.3, 2.6.1, 2.11, 3.0, 3.2, and 3.3
vulnerable to a path traversal attack, which could allow an attacker to access files stored on the system.
References
| Link | Resource |
|---|---|
| https://www.cisa.gov/news-events/ics-advisories/icsa-23-250-01 | Third Party Advisory US Government Resource |
Configurations
Configuration 1 (hide)
| AND |
|
History
15 Sep 2023, 17:35
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:doverfuelingsolutions:maglink_lx_web_console_configuration:2.11:*:*:*:*:*:*:* cpe:2.3:a:doverfuelingsolutions:maglink_lx_web_console_configuration:2.5.3:*:*:*:*:*:*:* cpe:2.3:a:doverfuelingsolutions:maglink_lx_web_console_configuration:3.3:*:*:*:*:*:*:* cpe:2.3:a:doverfuelingsolutions:maglink_lx_web_console_configuration:2.5.2:*:*:*:*:*:*:* cpe:2.3:a:doverfuelingsolutions:maglink_lx_web_console_configuration:2.6.1:*:*:*:*:*:*:* cpe:2.3:a:doverfuelingsolutions:maglink_lx_web_console_configuration:3.2:*:*:*:*:*:*:* cpe:2.3:a:doverfuelingsolutions:maglink_lx_web_console_configuration:2.5.1:*:*:*:*:*:*:* cpe:2.3:h:doverfuelingsolutions:maglink_lx_3:-:*:*:*:*:*:*:* cpe:2.3:a:doverfuelingsolutions:maglink_lx_web_console_configuration:3.0:*:*:*:*:*:*:* |
|
| References | (MISC) https://www.cisa.gov/news-events/ics-advisories/icsa-23-250-01 - Third Party Advisory, US Government Resource | |
| First Time |
Doverfuelingsolutions maglink Lx 3
Doverfuelingsolutions maglink Lx Web Console Configuration Doverfuelingsolutions |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
11 Sep 2023, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-09-11 20:15
Updated : 2024-02-28 20:33
NVD link : CVE-2023-38256
Mitre link : CVE-2023-38256
CVE.ORG link : CVE-2023-38256
JSON object : View
Products Affected
doverfuelingsolutions
- maglink_lx_3
- maglink_lx_web_console_configuration
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')