PatchTheCVE: doverfuelingsolutionshttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2024-45373: Once logged in to ProGauge MAGLINK LX4 CONSOLE, a valid user can change their privileges to administrator.https://patchthecve.com/cve/CVE-2024-45373.htmlhttps://patchthecve.com/cve/CVE-2024-45373.htmlWed, 17 Jun 2026 07:54:06 +0000HIGH 8.8: Once logged in to ProGauge MAGLINK LX4 CONSOLE, a valid user can change their privileges to administrator.CVE-2024-45066: A specially crafted POST request to the ProGauge MAGLINK LX CONSOLE IP sub-menu can allow a remote attacker thttps://patchthecve.com/cve/CVE-2024-45066.htmlhttps://patchthecve.com/cve/CVE-2024-45066.htmlWed, 17 Jun 2026 07:53:31 +0000CRITICAL 10.0: A specially crafted POST request to the ProGauge MAGLINK LX CONSOLE IP sub-menu can allow a remote attacker to inject arbitrary commands.CVE-2024-43693: A specially crafted POST request to the ProGauge MAGLINK LX CONSOLE UTILITY sub-menu can allow a remote attachttps://patchthecve.com/cve/CVE-2024-43693.htmlhttps://patchthecve.com/cve/CVE-2024-43693.htmlWed, 17 Jun 2026 07:51:32 +0000CRITICAL 10.0: A specially crafted POST request to the ProGauge MAGLINK LX CONSOLE UTILITY sub-menu can allow a remote attacker to inject arbitrary commands.CVE-2024-43692: An attacker can directly request the ProGauge MAGLINK LX CONSOLE resource sub page with full privileges by rehttps://patchthecve.com/cve/CVE-2024-43692.htmlhttps://patchthecve.com/cve/CVE-2024-43692.htmlWed, 17 Jun 2026 07:51:32 +0000CRITICAL 9.8: An attacker can directly request the ProGauge MAGLINK LX CONSOLE resource sub page with full privileges by requesting the URL directly.CVE-2024-43423: The web application for ProGauge MAGLINK LX4 CONSOLE contains an administrative-level user account with a pashttps://patchthecve.com/cve/CVE-2024-43423.htmlhttps://patchthecve.com/cve/CVE-2024-43423.htmlWed, 17 Jun 2026 07:51:00 +0000CRITICAL 9.8: The web application for ProGauge MAGLINK LX4 CONSOLE contains an administrative-level user account with a password that cannot be changed.CVE-2024-41725: ProGauge MAGLINK LX CONSOLE does not have sufficient filtering on input fields that are used to render pages https://patchthecve.com/cve/CVE-2024-41725.htmlhttps://patchthecve.com/cve/CVE-2024-41725.htmlWed, 17 Jun 2026 07:48:08 +0000HIGH 8.8: ProGauge MAGLINK LX CONSOLE does not have sufficient filtering on input fields that are used to render pages which may allow cross site scripting.CVE-2023-38256: Dover Fueling Solutions MAGLINK LX Web Console Configuration versions 2.5.1, 2.5.2, 2.5.3, 2.6.1, 2.11, 3.0, 3https://patchthecve.com/cve/CVE-2023-38256.htmlhttps://patchthecve.com/cve/CVE-2023-38256.htmlWed, 17 Jun 2026 06:09:46 +0000MEDIUM 6.8: Dover Fueling Solutions MAGLINK LX Web Console Configuration versions 2.5.1, 2.5.2, 2.5.3, 2.6.1, 2.11, 3.0, 3.2, and 3.3 vulnerable to a path traversal attack, which could allow an attacker to access files stored on the system. CVE-2023-36497: Dover Fueling Solutions MAGLINK LX Web Console Configuration versions 2.5.1, 2.5.2, 2.5.3, 2.6.1, 2.11, 3.0, 3https://patchthecve.com/cve/CVE-2023-36497.htmlhttps://patchthecve.com/cve/CVE-2023-36497.htmlWed, 17 Jun 2026 06:06:24 +0000HIGH 8.8: Dover Fueling Solutions MAGLINK LX Web Console Configuration versions 2.5.1, 2.5.2, 2.5.3, 2.6.1, 2.11, 3.0, 3.2, and 3.3 could allow a guest user to elevate to admin privileges.CVE-2023-41256: Dover Fueling Solutions MAGLINK LX Web Console Configuration versions 2.5.1, 2.5.2, 2.5.3, 2.6.1, 2.11, 3.0, https://patchthecve.com/cve/CVE-2023-41256.htmlhttps://patchthecve.com/cve/CVE-2023-41256.htmlWed, 17 Jun 2026 06:21:22 +0000CRITICAL 9.1: Dover Fueling Solutions MAGLINK LX Web Console Configuration versions 2.5.1, 2.5.2, 2.5.3, 2.6.1, 2.11, 3.0, 3.2, and 3.3 are vulnerable to authentication bypass that could allow an unauthorized attacker to obtain user access.