Description: CWE-306 Missing Authentication for Critical Function
Metrics
Version
Base score
Base severity
Vector
3.1
9.8
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Version:3.1
Base score:9.8
Base severity: CRITICAL
Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Metrics Other Info
Impacts
CAPEC ID
Description
Solutions
OPW Fuel Management Systems' parent company, Dover Fueling Systems
(DFS), recommends users install all versions of the product behind a
firewall as primary protection.
DFS recommends user running versions prior to V17Q.2.1 upgrade to
V17Q.2.1. Users with products that were distributed with versions newer
than V17Q.2.1 should contact DFS using the link below to confirm that
their build has the required fixes.
The software is available to authorized service providers for DFS products. Users should contact DFS https://www.doverfuelingsolutions.com/contact-us
service providers to have the software on their system upgraded or changed.
Configurations
Workarounds
Exploits
Credits
finder
Pedro Umbelino of Bitsight reported this vulnerability to CISA.