by Kastro
Paper/Archive/CVE-2025-30519

CVE-2025-30519

Dover Fueling Solutions ProGauge MagLink LX 4 — Dover Fueling Solutions ProGauge MagLink LX4 Devices Use of Weak Credentials

EPSS 0.5%CVSS 9.8
critical.is priorityof 100
37
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 39.2.392 × 207.8No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Dover Fueling Solutions ProGauge MagLink LX4 Devices have default root credentials that cannot be changed through standard administrative means. An attacker with network access to the device can gain administrative access to the system.

Affected

ProductAffectedFixed inSource
ProGauge MagLink LX 4< 4.20.34.20.3CNA
ProGauge MagLink LX Plus< 4.20.34.20.3CNA
ProGauge MagLink LX Ultimate< 5.20.35.20.3CNA

Scores by source

icscert (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
icscert (CNA)9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refcisa.gov/news-events/ics-advisories/icsa-25-261-07refdoverfuelingsolutions.com/mea/en/products-and-solutions/automatic-tank-gauging/consoles/progauge-maglink-lx-4-console.html