CVE-2023-36497

CVSS 3.1 Score 8.8 of 10 (high)

Details

Published Sep 11, 2023
Updated: Sep 15, 2023
CWE ID 284

Summary

CVE-2023-36497 is a vulnerability affecting the Dover Fueling Solutions MAGLINK LX Web Console in specific configuration versions, including 2.5.1, 2.5.2, 2.5.3, 2.6.1, 2.11, 3.0, 3.2, and 3.3. The issue permits a guest user to escalate privileges, potentially gaining unauthorized administrative access. This security weakness could lead to serious consequences, such as data breaches or system takeovers. Users of the affected versions are strongly advised to apply the necessary patches or updates provided by Dover Fueling Solutions to mitigate this vulnerability.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share