CVE-2024-45373

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Once logged in to ProGauge MAGLINK LX4 CONSOLE, a valid user can change their privileges to administrator.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-269

Affected software

VendorProductVersions
Dover Fueling Solutions (DFS)ProGauge MAGLINK LX CONSOLE<= 3.4.2.2.6
Dover Fueling Solutions (DFS)ProGauge MAGLINK LX4 CONSOLE<= 4.17.9e
doverfuelingsolutionsmaglink_lx_console<= 3.4.2.2.6
doverfuelingsolutionsmaglink_lx4_console<= 4.17.9e

References

Timeline

Published
Sep 25, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-453746.5The goTenna Pro ATAK plugin uses a weak password for sharing encryption keys via the key broadcast method. If the broadcasted encryption keCVE-2024-45387.5IDOR vulnerability in Janto Ticketing Software affecting version 4.3r10. This vulnerability could allow a remote user to obtain a user's eveCVE-2024-453825.5in OpenHarmony v4.1.0 and prior versions allow a local attacker cause DOS through out-of-bounds write.CVE-2024-453835.0A mishandling of IRP requests vulnerability exists in the HDAudBus_DMA interface of Microsoft High Definition Audio Bus Driver 10.0.19041.36CVE-2024-453845.3Padding Oracle vulnerability in Apache Druid extension, druid-pac4j. This could allow an attacker to manipulate a pac4j session cookie. ThiCVE-2024-453856.1A vulnerability has been identified in Industrial Edge Management OS (IEM-OS) (All versions). Affected components are vulnerable to reflecteCVE-2024-453868.8A vulnerability has been identified in SIMATIC PCS neo V4.0 (All versions), SIMATIC PCS neo V4.1 (All versions < V4.1 Update 2), SIMATIC PCSCVE-2024-453878.8An SQL injection vulnerability in Traffic Ops in Apache Traffic Control <= 8.0.1, >= 8.0.0 allows a privileged user with role "admin", "fedeCVE-2024-453887.5Hoverfly is a lightweight service virtualization/ API simulation / API mocking tool for developers and testers. The `/api/v2/simulation` POSCVE-2024-453895.4Pagefind, a fully static search library, initializes its dynamic JavaScript and WebAssembly files relative to the location of the first scriCVE-2024-45396.5An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.4 prior to 16.9.7, starting from 16.10 prior to 16.10.5CVE-2024-453909.8@blakeembrey/template is a string template library. Prior to version 1.2.0, it is possible to inject and run code within the template if the
CVE-2024-45373: High severity, CVSS 8.8 | Vulnix