What’s Vulnerable › Vulnerabilities

CVE-2025-55067: Integer Overflow or Wraparound in Veeder-Root TLS4B Automatic Tank Gauge System

• Severity: high (CVSS 7.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-10-23 · updated 2026-10-08
• Weakness: CWE-190

Description

The TLS4B ATG system is vulnerable to improper handling of Unix time values that exceed the 2038 epoch rollover. When the system clock reaches January 19, 2038, it resets to December 13, 1901, causing authentication failures and disrupting core system functionalities such as login access, history visibility, and leak detection termination. This vulnerability could allow an attacker to manipulate the system time to trigger a denial of service (DoS) condition, leading to administrative lockout, operational timer failures, and corrupted log entries.

Affected products

• Veeder-Root TLS4B Automatic Tank Gauge System: before 11.A — fixed in 11.A

How to fix

Upgrade to a fixed version: Veeder-Root TLS4B Automatic Tank Gauge System 11.A. Check the vendor advisory for mitigations.

References

• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-296-03.json
• https://www.cisa.gov/news-events/ics-advisories/icsa-25-296-03
• https://www.veeder.com/us/network-security-reminder

Get alerted when CVE-2025-55067 or the next vulnerability affects your stack