{"id":"CVE-2023-41256","aliases":["EUVD-2023-45773","GHSA-x3j2-3cg4-hvrw"],"status":"published","title":"Dover Fueling Solutions MAGLINK LX Console Authentication Bypass","description":"Dover Fueling Solutions MAGLINK LX Web Console Configuration versions 2.5.1, 2.5.2, 2.5.3, 2.6.1, 2.11, 3.0, 3.2, and 3.3 are vulnerable to authentication bypass that could allow an unauthorized attacker to obtain user access.","severity":{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00926,"percentile":0.60735,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-288"],"published":"2023-09-11T18:55:05Z","modified":"2026-06-17T06:21:22Z","products":[{"vendor":"dover fueling solutions","product":"maglink lx web console configuration"},{"vendor":"doverfuelingsolutions","product":"maglink_lx_web_console_configuration"}],"references":[{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-23-250-01","tags":["x_transferred","Third Party Advisory","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-41256"},{"url":"https://github.com/advisories/GHSA-x3j2-3cg4-hvrw"}],"sources":{"cve":[{"id":"CVE-2023-41256","title":"Dover Fueling Solutions MAGLINK LX Console Authentication Bypass","description":"\nDover Fueling Solutions MAGLINK LX Web Console Configuration versions 2.5.1, 2.5.2, 2.5.3, 2.6.1, 2.11, 3.0, 3.2, and 3.3 are vulnerable to authentication bypass that could allow an unauthorized attacker to obtain user access.\n\n","status":"published","published":"2023-09-11T18:55:05.231Z","modified":"2025-01-16T21:30:15.82Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical","assessor":"cna"}],"cwes":["CWE-288"],"updated_at":"2026-11-02T14:35:18.88314Z"}],"euvd":[{"id":"EUVD-2023-45773","description":"\nDover Fueling Solutions MAGLINK LX Web Console Configuration versions 2.5.1, 2.5.2, 2.5.3, 2.6.1, 2.11, 3.0, 3.2, and 3.3 are vulnerable to authentication bypass that could allow an unauthorized attacker to obtain user access.\n\n","status":"published","published":"2023-09-11T18:55:05Z","modified":"2025-01-16T21:30:15Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical"}],"updated_at":"2026-11-03T00:04:18.077485Z"}],"ghsa":[{"id":"GHSA-x3j2-3cg4-hvrw","title":"\nDover Fueling Solutions MAGLINK LX Web Console Configuration versions 2.5.1, 2.5.2, 2.5.3, 2.6.1...","description":"\nDover Fueling Solutions MAGLINK LX Web Console Configuration versions 2.5.1, 2.5.2, 2.5.3, 2.6.1, 2.11, 3.0, 3.2, and 3.3 are vulnerable to authentication bypass that could allow an unauthorized attacker to obtain user access.\n\n","status":"published","published":"2023-09-11T21:30:16Z","modified":"2024-04-04T07:36:01Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical"}],"cwes":["CWE-288"],"updated_at":"2026-11-02T14:56:53.151805Z"}],"nvd":[{"id":"CVE-2023-41256","description":"\nDover Fueling Solutions MAGLINK LX Web Console Configuration versions 2.5.1, 2.5.2, 2.5.3, 2.6.1, 2.11, 3.0, 3.2, and 3.3 are vulnerable to authentication bypass that could allow an unauthorized attacker to obtain user access.\n\n","status":"published","published":"2023-09-11T19:15:43.987Z","modified":"2026-06-17T06:21:22.887Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical","assessor":"secondary"},{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical","assessor":"primary"}],"cwes":["CWE-288"],"updated_at":"2026-11-02T14:08:28.268644Z"}]}}