PT-2024-31413
CVE-2024-45066
·
Published
2024-09-24
·
Updated
2024-11-07
Description by
CVSS 3.1
10
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
ProGauge MAGLINK LX CONSOLE (affected versions not specified)
Description
A specially crafted POST request to the "ProGauge MAGLINK LX CONSOLE IP sub-menu" can allow a remote attacker to inject arbitrary commands. This issue is being actively exploited. The vulnerability affects Automated Tank Gauge (ATG) systems, which are crucial for managing fuel storage tanks in critical infrastructure sectors.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾