PT-2024-31413

CVE-2024-45066

·

Published

2024-09-24

·

Updated

2024-11-07

Description by

CVSS 3.1
10
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions ProGauge MAGLINK LX CONSOLE (affected versions not specified)
Description A specially crafted POST request to the "ProGauge MAGLINK LX CONSOLE IP sub-menu" can allow a remote attacker to inject arbitrary commands. This issue is being actively exploited. The vulnerability affects Automated Tank Gauge (ATG) systems, which are crucial for managing fuel storage tanks in critical infrastructure sectors.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾