CVE-2024-41725

2024-09-2501:15:41

CWE-79

[email protected]

web.nvd.nist.gov

progauge maglink

input filtering

cross site scripting

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

17.7%

JSON

ProGauge MAGLINK LX CONSOLE does not have sufficient filtering on input
fields that are used to render pages which may allow cross site
scripting.

Affected configurations

Nvd

Node

doverfuelingsolutionsprogauge_maglink_lx_console_firmwareRange≤3.4.2.2.6

AND

doverfuelingsolutionsprogauge_maglink_lx_consoleMatch-

Node

doverfuelingsolutionsprogauge_maglink_lx4_console_firmwareRange≤4.17.9e

AND

doverfuelingsolutionsprogauge_maglink_lx4_consoleMatch-

VendorProductVersionCPE
doverfuelingsolutionsprogauge_maglink_lx_console_firmware*cpe:2.3:o:doverfuelingsolutions:progauge_maglink_lx_console_firmware:*:*:*:*:*:*:*:*
doverfuelingsolutionsprogauge_maglink_lx_console-cpe:2.3:h:doverfuelingsolutions:progauge_maglink_lx_console:-:*:*:*:*:*:*:*
doverfuelingsolutionsprogauge_maglink_lx4_console_firmware*cpe:2.3:o:doverfuelingsolutions:progauge_maglink_lx4_console_firmware:*:*:*:*:*:*:*:*
doverfuelingsolutionsprogauge_maglink_lx4_console-cpe:2.3:h:doverfuelingsolutions:progauge_maglink_lx4_console:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
doverfuelingsolutions	progauge_maglink_lx_console_firmware	*	cpe:2.3:o:doverfuelingsolutions:progauge_maglink_lx_console_firmware::::::::
doverfuelingsolutions	progauge_maglink_lx_console	-	cpe:2.3:h:doverfuelingsolutions:progauge_maglink_lx_console:-:::::::*
doverfuelingsolutions	progauge_maglink_lx4_console_firmware	*	cpe:2.3:o:doverfuelingsolutions:progauge_maglink_lx4_console_firmware::::::::
doverfuelingsolutions	progauge_maglink_lx4_console	-	cpe:2.3:h:doverfuelingsolutions:progauge_maglink_lx4_console:-:::::::*