PT-2025-26160 · Dover Fueling Solutions · Progauge Maglink Lx Console

Souvik Kandar · Published 2025-06-18 · Updated 2025-06-27 · CVE-2025-5310

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dover Fueling Solutions ProGauge MagLink LX Consoles (affected versions not specified)

Description A critical issue has been identified, allowing remote attackers to gain full control over fueling station equipment without requiring authentication. This poses a severe security risk, potentially enabling hackers to manipulate fuel operations, wipe configurations, or unleash malware, which could cripple gas stations. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued an urgent warning regarding this issue.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2025-5310

Affected Products

Progauge Maglink Lx Console

References · 15

• https://nvd.nist.gov/vuln/detail/CVE-2025-5310 · Security Note
• https://twitter.com/zoomeye_team/status/1935899129080955155 · Twitter Post
• https://t.me/pentestingnews/63111 · Telegram Post
• https://twitter.com/transilienceai/status/1935923958307545320 · Twitter Post
• https://twitter.com/the_yellow_fall/status/1935944912106840421 · Twitter Post
• https://twitter.com/UndercodeNews/status/1936002020961292616 · Twitter Post
• https://twitter.com/fridaysecurity/status/1935852590694031639 · Twitter Post
• https://twitter.com/transilienceai/status/1935923951475032101 · Twitter Post
• https://cisa.gov/news-events/ics-advisories/icsa-25-168-05 · Note
• https://twitter.com/fofabot/status/1936055580743045351 · Twitter Post
• https://twitter.com/samilaiho/status/1935244252650356857 · Twitter Post
• https://twitter.com/CVEnew/status/1938671232926531593 · Twitter Post
• https://twitter.com/CveFindCom/status/1938653626026606892 · Twitter Post
• https://ociocisa.sharepoint.com/teams/JCDC-ProductionOffice/Shared%20Documents/Forms/AllItems.aspx?OR=Teams%2DHL&CT=1736953471669&id=%2Fteams%2FJCDC%2DProductionOffice%2FShared%20Documents%2FPublications%2FICS%20Publishing%2F2025%20ICSAs%2FJUN%2017%2FVU%23285756%20%2D%20Dover%20Fueling%20Solutions%20ProGauge%20MAGLINK%20%2D%20Notice%20%28Draft%29%2Ehtml&viewid=243fd1ea%2Da122%2D4cc0%2Dbe91%2Dd0714ca46b87&parent=%2Fteams%2FJCDC%2DProductionOffice%2FShared%20Documents%2FPublications%2FICS%20Publishing%2F2025%20ICSAs%2FJUN%2017 · Note
• https://t.me/cvetracker/27267 · Telegram Post