Back to Database
Status published
Medium
CVE-2023-38256
Dover Fueling Solutions MAGLINK LX Console Path Traversal
Vulnerability Description
Dover Fueling Solutions MAGLINK LX Web Console Configuration versions 2.5.1, 2.5.2, 2.5.3, 2.6.1, 2.11, 3.0, 3.2, and 3.3 vulnerable to a path traversal attack, which could allow an attacker to access files stored on the system.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-38256
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Soufian El Yadmani of Darktrace / CSIRT.global reported these vulnerabilities
More from Dover Fueling Solutions
View All →CVE-2025-5310
Dover Fueling Solutions ProGauge MagLink LX Consoles Missing Authentication for Critical Function
Critical
9.3
CVE-2025-55068
Dover Fueling Solutions ProGauge MagLink LX4 Devices Integer Overflow or Wraparound
High
8.8
CVE-2025-54807
Dover Fueling Solutions ProGauge MagLink LX 4 Devices Use of Hard-coded Cryptographic Key
Critical
9.3
CVE-2025-30519
Dover Fueling Solutions ProGauge MagLink LX4 Devices Use of Weak Credentials
Critical
9.3
CVE-2023-41256
Dover Fueling Solutions MAGLINK LX Console Authentication Bypass
Critical
9.1
Affected Vendor
Dover Fueling Solutions
View all reports →Affected Software
MAGLINK LX Web Console Configuration
Vulnerable Versions:
2.5.1, 2.5.2, 2.5.3, 2.6.1, 2.11, 3.0, 3.2, 3.3
Timeline
Official Publish:
September 11th, 2023
Last Modified:
January 16th, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N