An attacker can directly request the ProGauge MAGLINK LX CONSOLE resource sub page with full privileges by requesting the URL directly.
The product requires authentication, but the product has an alternate path or channel that does not require authentication.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Progauge_maglink_lx_console_firmware | Doverfuelingsolutions | * | 3.4.2.2.6 (including) |