An attacker can directly request the ProGauge MAGLINK LX CONSOLE resource sub page with full privileges by requesting the URL directly.
A product requires authentication, but the product has an alternate path or channel that does not require authentication.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Progauge_maglink_lx_console_firmware | Doverfuelingsolutions | * | 3.4.2.2.6 (including) |