CVE-2023-36497

Description

Dover Fueling Solutions MAGLINK LX Web Console Configuration versions 2.5.1, 2.5.2, 2.5.3, 2.6.1, 2.11, 3.0, 3.2, and 3.3 could allow a guest user to elevate to admin privileges.

Reserved 2023-09-01 | Published 2023-09-11 | Updated 2024-10-24 | Assigner icscert

Problem types

CWE-305: Authentication Bypass by Primary Weakness

Product status

Default status
unaffected

2.5.1
affected

2.5.2
affected

2.5.3
affected

2.6.1
affected

2.11
affected

3.0
affected

3.2
affected

3.3
affected

Credits

Soufian El Yadmani of Darktrace / CSIRT.global reported these vulnerabilities finder

References

www.cisa.gov/news-events/ics-advisories/icsa-23-250-01

cve.org (CVE-2023-36497)

nvd.nist.gov (CVE-2023-36497)

Download JSON