PT-2025-38480 · Dover Fueling Solutions · Progauge Maglink Lx 4+2

Pedro Umbelino · CVE-2025-54807 · Published 2025-09-18 · Updated 2026-06-04

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. (affected versions not specified)

Description The secret used for validating authentication tokens is hardcoded in device firmware. An attacker who obtains the signing key can bypass authentication, gaining complete access to the system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-321

Related Identifiers

CVE-2025-54807

Affected Products

Progauge Maglink Lx 4

Progauge Maglink Lx Plus

Progauge Maglink Lx Ultimate

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2025-54807 · Security Note
• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-261-07.json · Note
• https://doverfuelingsolutions.com/mea/en/products-and-solutions/automatic-tank-gauging/consoles/progauge-maglink-lx-4-console.html · Note
• https://twitter.com/CveFindCom/status/1968784566291763260 · Twitter Post
• https://twitter.com/CVEnew/status/1968923583662465072 · Twitter Post
• https://t.me/cveNotify/166078 · Telegram Post
• https://cisa.gov/news-events/ics-advisories/icsa-25-261-07 · Note
• https://t.me/CVEtracker/32876 · Telegram Post