CVE Vulnerabilities

CVE-2023-41256

Authentication Bypass Using an Alternate Path or Channel

Published: Sep 11, 2023 | Modified: Nov 21, 2024
CVSS 3.x
9.1
CRITICAL
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

Dover Fueling Solutions MAGLINK LX Web Console Configuration versions 2.5.1, 2.5.2, 2.5.3, 2.6.1, 2.11, 3.0, 3.2, and 3.3 are vulnerable to authentication bypass that could allow an unauthorized attacker to obtain user access.

Weakness

The product requires authentication, but the product has an alternate path or channel that does not require authentication.

Affected Software

NameVendorStart VersionEnd Version
Maglink_lx_web_console_configurationDoverfuelingsolutions2.5.1 (including)2.5.1 (including)
Maglink_lx_web_console_configurationDoverfuelingsolutions2.5.2 (including)2.5.2 (including)
Maglink_lx_web_console_configurationDoverfuelingsolutions2.5.3 (including)2.5.3 (including)
Maglink_lx_web_console_configurationDoverfuelingsolutions2.6.1 (including)2.6.1 (including)
Maglink_lx_web_console_configurationDoverfuelingsolutions2.11 (including)2.11 (including)
Maglink_lx_web_console_configurationDoverfuelingsolutions3.0 (including)3.0 (including)
Maglink_lx_web_console_configurationDoverfuelingsolutions3.2 (including)3.2 (including)
Maglink_lx_web_console_configurationDoverfuelingsolutions3.3 (including)3.3 (including)

Potential Mitigations

References