CVE-2024-41725

ProGauge MAGLINK LX CONSOLE does not have sufficient filtering on input fields that are used to render pages which may allow cross site scripting.

Score

CVSS 3.1 8.8 High

Status

Analyzed - ics-cert@hq.dhs.gov

Published

2024-09-25

Last modified

2024-09-25

Weaknesses

CWE-79

Affected products

• Progauge Maglink Lx4 Console (Dover Fueling Solutions Dfs)
• Progauge Maglink Lx Console (Dover Fueling Solutions Dfs)
• Maglink Lx4 Console (Doverfuelingsolutions)
• Maglink Lx Console (Doverfuelingsolutions)
• Progauge Maglink Lx4 Console Firmware (Doverfuelingsolutions)
• Progauge Maglink Lx Console Firmware (Doverfuelingsolutions)

References

• https://www.cisa.gov/news-events/ics-advisories/icsa-24-268-04