Lucene search
HistorySep 11, 2023 - 8:15 p.m.
CVE-2023-38256
security vulnerability
path traversal
file access
system vulnerability
cve-2023-38256
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
7.1
Confidence
High
EPSS
0.001
Percentile
50.4%
Dover Fueling Solutions MAGLINK LX Web Console Configuration versions 2.5.1, 2.5.2, 2.5.3, 2.6.1, 2.11, 3.0, 3.2, and 3.3
vulnerable to a path traversal attack, which could allow an attacker to access files stored on the system.
Affected configurations
Node
doverfuelingsolutionsmaglink_lx_web_console_configurationMatch2.5.1
ORdoverfuelingsolutionsmaglink_lx_web_console_configurationMatch2.5.2
ORdoverfuelingsolutionsmaglink_lx_web_console_configurationMatch2.5.3
ORdoverfuelingsolutionsmaglink_lx_web_console_configurationMatch2.6.1
ORdoverfuelingsolutionsmaglink_lx_web_console_configurationMatch2.11
ORdoverfuelingsolutionsmaglink_lx_web_console_configurationMatch3.0
ORdoverfuelingsolutionsmaglink_lx_web_console_configurationMatch3.2
ORdoverfuelingsolutionsmaglink_lx_web_console_configurationMatch3.3
doverfuelingsolutionsmaglink_lx_3Match-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| doverfuelingsolutions | maglink_lx_web_console_configuration | 2.5.1 | cpe:2.3:a:doverfuelingsolutions:maglink_lx_web_console_configuration:2.5.1:*:*:*:*:*:*:* |
| doverfuelingsolutions | maglink_lx_web_console_configuration | 2.5.2 | cpe:2.3:a:doverfuelingsolutions:maglink_lx_web_console_configuration:2.5.2:*:*:*:*:*:*:* |
| doverfuelingsolutions | maglink_lx_web_console_configuration | 2.5.3 | cpe:2.3:a:doverfuelingsolutions:maglink_lx_web_console_configuration:2.5.3:*:*:*:*:*:*:* |
| doverfuelingsolutions | maglink_lx_web_console_configuration | 2.6.1 | cpe:2.3:a:doverfuelingsolutions:maglink_lx_web_console_configuration:2.6.1:*:*:*:*:*:*:* |
| doverfuelingsolutions | maglink_lx_web_console_configuration | 2.11 | cpe:2.3:a:doverfuelingsolutions:maglink_lx_web_console_configuration:2.11:*:*:*:*:*:*:* |
| doverfuelingsolutions | maglink_lx_web_console_configuration | 3.0 | cpe:2.3:a:doverfuelingsolutions:maglink_lx_web_console_configuration:3.0:*:*:*:*:*:*:* |
| doverfuelingsolutions | maglink_lx_web_console_configuration | 3.2 | cpe:2.3:a:doverfuelingsolutions:maglink_lx_web_console_configuration:3.2:*:*:*:*:*:*:* |
| doverfuelingsolutions | maglink_lx_web_console_configuration | 3.3 | cpe:2.3:a:doverfuelingsolutions:maglink_lx_web_console_configuration:3.3:*:*:*:*:*:*:* |
| doverfuelingsolutions | maglink_lx_3 | - | cpe:2.3:h:doverfuelingsolutions:maglink_lx_3:-:*:*:*:*:*:*:* |
Related
cve
cve
CVE-2023-38256
2023-09-11 20:15:09
prion
prion
Path traversal
2023-09-11 20:15:00
cvelist
cvelist
CVE-2023-38256 Dover Fueling Solutions MAGLINK LX Console Path Traversal
2023-09-11 19:34:11
ics
ics
Dover Fueling Solutions MAGLINK LX Console
2023-09-07 12:00:00
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
7.1
Confidence
High
EPSS
0.001
Percentile
50.4%
Related for NVD:CVE-2023-38256