CVE-2023-36497

Published: Sep 11, 2023Modified: Jun 17, 2026

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

Dover Fueling Solutions MAGLINK LX Web Console Configuration versions 2.5.1, 2.5.2, 2.5.3, 2.6.1, 2.11, 3.0, 3.2, and 3.3 could allow a guest user to elevate to admin privileges.

Affected (8)

Products: Doverfuelingsolutions: Maglink Lx Web Console Configuration

Doverfuelingsolutions

1 product

Maglink Lx Web Console Configuration

Configuration A

8 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Doverfuelingsolutions Maglink Lx Web Console Configuration	Version 2.11
Doverfuelingsolutions Maglink Lx Web Console Configuration	Version 2.5.1
Doverfuelingsolutions Maglink Lx Web Console Configuration	Version 2.5.2
Doverfuelingsolutions Maglink Lx Web Console Configuration	Version 2.5.3
Doverfuelingsolutions Maglink Lx Web Console Configuration	Version 2.6.1
Doverfuelingsolutions Maglink Lx Web Console Configuration	Version 3.0
Doverfuelingsolutions Maglink Lx Web Console Configuration	Version 3.2
Doverfuelingsolutions Maglink Lx Web Console Configuration	Version 3.3

Running on/with	Platform Versions
Doverfuelingsolutions Maglink Lx 3	All versions

Related CWEs

CWE-305

Authentication Bypass by Primary Weakness

The authentication algorithm is sound, but the implemented mechanism can be bypassed as the result of a separate weakness that is primary to the authentication error.

References (2)

https://www.cisa.gov/news-events/ics-advisories/icsa-23-250-01

Source: ics-cert@hq.dhs.gov

Third Party AdvisoryUS Government Resource

https://www.cisa.gov/news-events/ics-advisories/icsa-23-250-01

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

Timeline

No history available yet.