progauge maglink lx4 console firmware vulnerabilities and fixes

Recent CVEs affecting progauge maglink lx4 console firmware, with upgrade or downgrade steps. 6 tracked.

Also searched as: progaugemaglinklx4consolefirmware.

progauge maglink lx4 console firmware has 6 tracked vulnerabilities, 4 critical. A fixed release or vendor patch exists for 6. Most recent: 2024-09-25. Highest priority: CVE-2024-45066 (score 54/100).

CVE-2024-45373 HIGH 8.8 UPGRADE UPGRADE Once logged in to ProGauge MAGLINK LX4 CONSOLE, a valid user can change their privileges to administrator.
CVE-2024-45066 CRITICAL 10.0 UPGRADE UPGRADE A specially crafted POST request to the ProGauge MAGLINK LX CONSOLE IP sub-menu can allow a remote attacker t
CVE-2024-43693 CRITICAL 10.0 UPGRADE UPGRADE A specially crafted POST request to the ProGauge MAGLINK LX CONSOLE UTILITY sub-menu can allow a remote attac
CVE-2024-43692 CRITICAL 9.8 UPGRADE UPGRADE An attacker can directly request the ProGauge MAGLINK LX CONSOLE resource sub page with full privileges by re
CVE-2024-43423 CRITICAL 9.8 UPGRADE UPGRADE The web application for ProGauge MAGLINK LX4 CONSOLE contains an administrative-level user account with a pas
CVE-2024-41725 HIGH 8.8 UPGRADE UPGRADE ProGauge MAGLINK LX CONSOLE does not have sufficient filtering on input fields that are used to render pages

FAQ

How do I fix progauge maglink lx4 console firmware vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is progauge maglink lx4 console firmware being exploited right now?

None of the tracked progauge maglink lx4 console firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which progauge maglink lx4 console firmware CVE should I patch first?

CVE-2024-45066 currently ranks highest (54/100): A specially crafted POST request to the ProGauge MAGLINK LX CONSOLE IP sub-menu can allow a remote attacker t.

RSS feed for progauge maglink lx4 console firmware · ← Back to latest CVEs