CVE-2024-45066CWE-77

Dover Fueling Solutions ProGauge MAGLINK LX CONSOLE Command Injection

Critical · published September 24, 2024

CVSS v4.0
10.0
EPSS
1%
Percentile
55.7
In the wild
Unconfirmed
What it is

🚨 A crafty POST request could let attackers unleash arbitrary commands on the ProGauge MAGLINK LX CONSOLE! That's an open door to chaos! 🔥 Imagine a mischievous guest at a hotel who can slip into the manager's office and rewrite the guest ledger at will — that's the level of access this vulnerability provides! An attacker could manipulate the console to execute any command, potentially taking control of critical operations, accessing sensitive data, or causing mayhem with the system's functionality. This could lead to significant disruptions and security breaches if left unaddressed!

Put simply

Imagine a mischievous guest at a hotel who can slip into the manager's office and rewrite the guest ledger at will — that's the level of access this vulnerability provides! CVE-2024-45066 allows an attacker to send specially crafted POST requests to the ProGauge MAGLINK LX CONSOLE, enabling them to inject arbitrary commands and execute unintended actions on the device.

What to do

An attacker could manipulate the console to execute any command, potentially taking control of critical operations, accessing sensitive data, or causing mayhem with the system's functionality. This could lead to significant disruptions and security breaches if left unaddressed! Immediately apply any available patches from the vendor to secure your ProGauge MAGLINK LX CONSOLE against this vulnerability. Additionally, review and restrict permissions for network access to the console and monitor for any suspicious activity. Stay vigilant! You've got this! Follow these steps, and you’ll keep your systems safe and sound! 🛡️

The record
Technical detail
CVSS v4.0
10.0 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
EPSS
0.00788 · 55.7th percentile
Weakness
CWE-77 · Improper Neutralization of Special Elements used in a Command ('Command Injection')
Published
2024-09-24T23:51Z
EPSS history
Timeline
  • 24 SEP 23:51Z
    Dover Fueling Solutions ProGauge MAGLINK LX CONSOLE Command Injection
    cvelistv5