Lucene search
HistorySep 25, 2024 - 1:15 a.m.
CVE-2024-43693
remote attacker
arbitrary commands
post request
progauge maglink lx console utility
CVSS3
10
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
EPSS
0
Percentile
9.6%
A specially crafted POST request to the ProGauge MAGLINK LX CONSOLE
UTILITY sub-menu can allow a remote attacker to inject arbitrary
commands.
Related
cvelist
cvelist
vulnrichment
vulnrichment
cve
cve
CVE-2024-43693
2024-09-25 01:15:43
ics
ics
Dover Fueling Solutions ProGauge MAGLINK LX CONSOLE
2024-09-24 12:00:00
thn
thn
Critical Flaws in Tank Gauge Systems Expose Gas Stations to Remote Attacks
2024-09-30 11:55:00
CVSS3
10
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
EPSS
0
Percentile
9.6%
Related for NVD:CVE-2024-43693