What’s Vulnerable › Vulnerabilities

CVE-2025-30519: Dover Fueling Solutions ProGauge MagLink LX4 Devices Use of Weak Credentials

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-09-18 · updated 2026-10-18
• Weakness: CWE-1391

Description

Dover Fueling Solutions ProGauge MagLink LX4 Devices have default root credentials that cannot be changed through standard administrative means. An attacker with network access to the device can gain administrative access to the system.

Affected products

• Dover Fueling Solutions ProGauge MagLink LX 4: before 4.20.3 — fixed in 4.20.3
• Dover Fueling Solutions ProGauge MagLink LX Plus: before 4.20.3 — fixed in 4.20.3
• Dover Fueling Solutions ProGauge MagLink LX Ultimate: before 5.20.3 — fixed in 5.20.3

How to fix

Upgrade to a fixed version: Dover Fueling Solutions ProGauge MagLink LX 4 4.20.3; Dover Fueling Solutions ProGauge MagLink LX Plus 4.20.3; Dover Fueling Solutions ProGauge MagLink LX Ultimate 5.20.3. Check the vendor advisory for mitigations.

References

• https://www.cisa.gov/news-events/ics-advisories/icsa-25-261-07
• https://www.doverfuelingsolutions.com/mea/en/products-and-solutions/automatic-tank-gauging/consoles/progauge-maglink-lx-4-console.html

Get alerted when CVE-2025-30519 or the next vulnerability affects your stack