Dover Fueling Solutions released a new software update version 4.19.10
for the MagLink LX console to address these vulnerabilities. The
software release is available for installation on consoles through DFS's
authorized service organizations in North America. North American users
can reach DFS's customer support team by telephone at 877-679-8324.
Configurations
Workarounds
DFS strongly encourages users of MagLink products to:
* Install MagLink consoles behind firewalls for security.
* Monitor and install updates on a timely basis.
* Contact DFS customer support with any questions about operations or updates of MagLink software.
Alternatively, MagLink may operate offfline or disconnected from a network.
Registered MagLink customers have access to technical information,
updates, and technical bulletins via a DFS proprietary portal.
Exploits
Credits
finder
Pedro Umbelino of Bitsight reported these vulnerabilities to CISA.