CVE-2023-41256

doverfuelingsolutions maglink lx web console configuration

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2023-41256

Katalog CVE

CVSS 9.1 · Critical EPSS 0,93%

Kerentanan Authentication Bypass Using an Alternate Path or Channel pada doverfuelingsolutions maglink lx web console configuration. Skor CVSS 3.1 9.1 (Critical) menurut NVD.

Deskripsi (NVD)

Dover Fueling Solutions MAGLINK LX Web Console Configuration versions 2.5.1, 2.5.2, 2.5.3, 2.6.1, 2.11, 3.0, 3.2, and 3.3 are vulnerable to authentication bypass that could allow an unauthorized attacker to obtain user access.

Rincian

Terbit di NVD
11 September 2023
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
9.1 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-288: Authentication Bypass Using an Alternate Path or Channel
EPSS (30 hari)
0,93% peluang dieksploitasi; lebih tinggi dari 59,4% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
doverfuelingsolutions maglink lx web console configuration Versi 2.5.1
doverfuelingsolutions maglink lx web console configuration Versi 2.5.2
doverfuelingsolutions maglink lx web console configuration Versi 2.5.3
doverfuelingsolutions maglink lx web console configuration Versi 2.6.1
doverfuelingsolutions maglink lx web console configuration Versi 2.11
doverfuelingsolutions maglink lx web console configuration Versi 3.0
doverfuelingsolutions maglink lx web console configuration Versi 3.2
doverfuelingsolutions maglink lx web console configuration Versi 3.3

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.