ICS Advisory: Dover Fueling Solutions MAGLINK LX Console

Summary:

A critical vulnerability has been identified in the MAGLINK LX Web Console Configuration, a product manufactured by Dover Fueling Solutions, with a CVSS v3 score of 9.1. The vulnerability allows for authentication bypass, improper access control, and path traversal, which could enable an attacker to gain full access to the system. The affected versions range from 2.5.1 to 3.3, and it is recommended that users upgrade to version 3.4.2.2.6 or 4 to address the issue. Additionally, CISA recommends defensive measures such as minimizing network exposure, locating control systems behind firewalls, and using secure remote access methods.