PatchTheCVECVE-2024-41725: ProGauge MAGLINK LX CONSOLE does not have sufficient filtering on input fields that are used to render pages
CVE-2024-41725 is a high-severity flaw (CVSS 8.8) affecting progauge maglink lx console firmware, progauge maglink lx4 console firmware. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
ProGauge MAGLINK LX CONSOLE does not have sufficient filtering on input fields that are used to render pages which may allow cross site scripting.
Why this priority
- High severity
A fixed release or distro patch exists.
Risk facts
| CVSS score | 8.8 (High) |
| Attack vector | Network (remote) |
| Attack complexity | Low |
| Privileges needed | None |
| User interaction | Required |
| EPSS exploit chance | 0.4% (top 70%) |
| CISA exploited list | No |
| Weakness | CWE-79 |
| Published | 2024-09-25 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2024-41725?
progauge maglink lx console firmware: upgrade to newer than 3.4.2.2.6; progauge maglink lx4 console firmware: upgrade to newer than 4.17.9e. Exact commands for each OS are on this page.
Is CVE-2024-41725 being exploited?
CVE-2024-41725 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2024-41725 affect?
CVE-2024-41725 affects progauge maglink lx console firmware, progauge maglink lx4 console firmware. Severity is high (CVSS 8.8). ProGauge MAGLINK LX CONSOLE does not have sufficient filtering on input fields that are used to render pages which may allow cross site scripting.
How urgent is CVE-2024-41725?
Priority 38/100. High severity
Related CVEs
- CVE-2024-45373 HIGH 8.8 UPGRADE UPGRADE Once logged in to ProGauge MAGLINK LX4 CONSOLE, a valid user can change their privileges to administrator.
- CVE-2024-45066 CRITICAL 10.0 UPGRADE UPGRADE A specially crafted POST request to the ProGauge MAGLINK LX CONSOLE IP sub-menu can allow a remote attacker t
- CVE-2024-43693 CRITICAL 10.0 UPGRADE UPGRADE A specially crafted POST request to the ProGauge MAGLINK LX CONSOLE UTILITY sub-menu can allow a remote attac
- CVE-2024-43692 CRITICAL 9.8 UPGRADE UPGRADE An attacker can directly request the ProGauge MAGLINK LX CONSOLE resource sub page with full privileges by re
- CVE-2024-43423 CRITICAL 9.8 UPGRADE UPGRADE The web application for ProGauge MAGLINK LX4 CONSOLE contains an administrative-level user account with a pas