CVE-2023-41256

Published: Sep 11, 2023Modified: Jun 17, 2026

9.1

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Exploitability: 3.9 / Impact: 5.2

Source: NVD

Description

Dover Fueling Solutions MAGLINK LX Web Console Configuration versions 2.5.1, 2.5.2, 2.5.3, 2.6.1, 2.11, 3.0, 3.2, and 3.3 are vulnerable to authentication bypass that could allow an unauthorized attacker to obtain user access.

Affected (8)

Products: Doverfuelingsolutions: Maglink Lx Web Console Configuration

Doverfuelingsolutions

1 product

Maglink Lx Web Console Configuration

Configuration A

8 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Doverfuelingsolutions Maglink Lx Web Console Configuration	Version 2.11
Doverfuelingsolutions Maglink Lx Web Console Configuration	Version 2.5.1
Doverfuelingsolutions Maglink Lx Web Console Configuration	Version 2.5.2
Doverfuelingsolutions Maglink Lx Web Console Configuration	Version 2.5.3
Doverfuelingsolutions Maglink Lx Web Console Configuration	Version 2.6.1
Doverfuelingsolutions Maglink Lx Web Console Configuration	Version 3.0
Doverfuelingsolutions Maglink Lx Web Console Configuration	Version 3.2
Doverfuelingsolutions Maglink Lx Web Console Configuration	Version 3.3

Running on/with	Platform Versions
Doverfuelingsolutions Maglink Lx 3	All versions

Related CWEs

CWE-288

Authentication Bypass Using an Alternate Path or Channel

A product requires authentication, but the product has an alternate path or channel that does not require authentication.

References (2)

https://www.cisa.gov/news-events/ics-advisories/icsa-23-250-01

Source: ics-cert@hq.dhs.gov

Third Party AdvisoryUS Government Resource

https://www.cisa.gov/news-events/ics-advisories/icsa-23-250-01

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

Timeline

No history available yet.