Back to Database
Status published
Critical
CVE-2023-41256
Dover Fueling Solutions MAGLINK LX Console Authentication Bypass
Vulnerability Description
Dover Fueling Solutions MAGLINK LX Web Console Configuration versions 2.5.1, 2.5.2, 2.5.3, 2.6.1, 2.11, 3.0, 3.2, and 3.3 are vulnerable to authentication bypass that could allow an unauthorized attacker to obtain user access.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-41256
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Soufian El Yadmani of Darktrace / CSIRT.global reported these vulnerabilities
More from Dover Fueling Solutions
View All →CVE-2025-5310
Dover Fueling Solutions ProGauge MagLink LX Consoles Missing Authentication for Critical Function
Critical
9.3
CVE-2025-55068
Dover Fueling Solutions ProGauge MagLink LX4 Devices Integer Overflow or Wraparound
High
8.8
CVE-2025-54807
Dover Fueling Solutions ProGauge MagLink LX 4 Devices Use of Hard-coded Cryptographic Key
Critical
9.3
CVE-2025-30519
Dover Fueling Solutions ProGauge MagLink LX4 Devices Use of Weak Credentials
Critical
9.3
CVE-2023-38256
Dover Fueling Solutions MAGLINK LX Console Path Traversal
Medium
6.8
Affected Vendor
Dover Fueling Solutions
View all reports →Affected Software
MAGLINK LX Web Console Configuration
Vulnerable Versions:
2.5.1, 2.5.2, 2.5.3, 2.6.1, 2.11, 3.0, 3.2, 3.3
Timeline
Official Publish:
September 11th, 2023
Last Modified:
January 16th, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N