Progauge Maglink Lx Console Firmware

progauge_maglink_lx_console_firmware

CVEs (6)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2024-45373 1Doverfuelingsolutions 2Progauge Maglink Lx4 Console Firmware Progauge Maglink Lx Console Firmware Jun 17, 2026 Sep 25, 2024 8.7 HIGH· v4 8.8 HIGH· v3 N/A· v2 Once logged in to ProGauge MAGLINK LX4 CONSOLE, a valid user can change their privileges to administrator.
CVE-2024-45066 1Doverfuelingsolutions 2Progauge Maglink Lx4 Console Firmware Progauge Maglink Lx Console Firmware Jun 17, 2026 Sep 25, 2024 10.0 CRITICAL· v4 9.8 CRITICAL· v3 N/A· v2 A specially crafted POST request to the ProGauge MAGLINK LX CONSOLE IP sub-menu can allow a remote attacker to inject arbitrary commands.
CVE-2024-43693 1Doverfuelingsolutions 2Progauge Maglink Lx4 Console Firmware Progauge Maglink Lx Console Firmware Jun 17, 2026 Sep 25, 2024 10.0 CRITICAL· v4 9.8 CRITICAL· v3 N/A· v2 A specially crafted POST request to the ProGauge MAGLINK LX CONSOLE UTILITY sub-menu can allow a remote attacker to inject arbitrary commands.
CVE-2024-43692 1Doverfuelingsolutions 2Progauge Maglink Lx4 Console Firmware Progauge Maglink Lx Console Firmware Jun 17, 2026 Sep 25, 2024 9.3 CRITICAL· v4 9.8 CRITICAL· v3 N/A· v2 An attacker can directly request the ProGauge MAGLINK LX CONSOLE resource sub page with full privileges by requesting the URL directly.
CVE-2024-43423 1Doverfuelingsolutions 2Progauge Maglink Lx4 Console Firmware Progauge Maglink Lx Console Firmware Jun 17, 2026 Sep 25, 2024 9.3 CRITICAL· v4 9.8 CRITICAL· v3 N/A· v2 The web application for ProGauge MAGLINK LX4 CONSOLE contains an administrative-level user account with a password that cannot be changed.
CVE-2024-41725 1Doverfuelingsolutions 2Progauge Maglink Lx4 Console Firmware Progauge Maglink Lx Console Firmware Jun 17, 2026 Sep 25, 2024 8.7 HIGH· v4 6.1 MEDIUM· v3 N/A· v2 ProGauge MAGLINK LX CONSOLE does not have sufficient filtering on input fields that are used to render pages which may allow cross site scripting.