PatchTheCVECVE-2024-43692: An attacker can directly request the ProGauge MAGLINK LX CONSOLE resource sub page with full privileges by re
CVE-2024-43692 is a critical-severity flaw (CVSS 9.8) affecting progauge maglink lx console firmware, progauge maglink lx4 console firmware. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
An attacker can directly request the ProGauge MAGLINK LX CONSOLE resource sub page with full privileges by requesting the URL directly.
Why this priority
- Critical severity
- Remotely exploitable, no login, no user action
A fixed release or distro patch exists.
Risk facts
| CVSS score | 9.8 (Critical) |
| Attack vector | Network (remote) |
| Attack complexity | Low |
| Privileges needed | None |
| User interaction | None |
| EPSS exploit chance | 0.5% (top 57%) |
| CISA exploited list | No |
| Weakness | CWE-288 |
| Published | 2024-09-25 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2024-43692?
progauge maglink lx console firmware: upgrade to newer than 3.4.2.2.6; progauge maglink lx4 console firmware: upgrade to newer than 4.17.9e. Exact commands for each OS are on this page.
Is CVE-2024-43692 being exploited?
CVE-2024-43692 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2024-43692 affect?
CVE-2024-43692 affects progauge maglink lx console firmware, progauge maglink lx4 console firmware. Severity is critical (CVSS 9.8). An attacker can directly request the ProGauge MAGLINK LX CONSOLE resource sub page with full privileges by requesting the URL directly.
How urgent is CVE-2024-43692?
Priority 50/100. Critical severity; Remotely exploitable, no login, no user action
Related CVEs
- CVE-2024-45373 HIGH 8.8 UPGRADE UPGRADE Once logged in to ProGauge MAGLINK LX4 CONSOLE, a valid user can change their privileges to administrator.
- CVE-2024-45066 CRITICAL 10.0 UPGRADE UPGRADE A specially crafted POST request to the ProGauge MAGLINK LX CONSOLE IP sub-menu can allow a remote attacker t
- CVE-2024-43693 CRITICAL 10.0 UPGRADE UPGRADE A specially crafted POST request to the ProGauge MAGLINK LX CONSOLE UTILITY sub-menu can allow a remote attac
- CVE-2024-43423 CRITICAL 9.8 UPGRADE UPGRADE The web application for ProGauge MAGLINK LX4 CONSOLE contains an administrative-level user account with a pas
- CVE-2024-41725 HIGH 8.8 UPGRADE UPGRADE ProGauge MAGLINK LX CONSOLE does not have sufficient filtering on input fields that are used to render pages