CVE-2025-30519

CRITICAL

Dover Fueling Solutions ProGauge MagLink LX4 - Privilege Escalation

Title source: llm

Description

Dover Fueling Solutions ProGauge MagLink LX4 Devices have default root credentials that cannot be changed through standard administrative means. An attacker with network access to the device can gain administrative access to the system.

References (2)

[Various Sources] https://www.doverfuelingsolutions.com/mea/en/products-and-solutions/automatic-tank-gauging/consoles/progauge-maglink-lx-4-console.html

[Third Party Advisory, US Government Resource] https://www.cisa.gov/news-events/ics-advisories/icsa-25-261-07

Scores

CVSS v3 9.8

EPSS 0.0006

EPSS Percentile 19.6%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable yes

Technical Impact total

Details

CWE

CWE-1391

Status published

Products (3)

Dover Fueling Solutions/ProGauge MagLink LX 4 < 4.20.3

Dover Fueling Solutions/ProGauge MagLink LX Plus < 4.20.3

Dover Fueling Solutions/ProGauge MagLink LX Ultimate < 5.20.3

Published Sep 18, 2025

Tracked Since Feb 18, 2026