Read the docs
TI-2025-34757 Aliases CVE-2025-55067GHSA-prwc-ww33-6c67

Integer Overflow or Wraparound in Veeder-Root TLS4B Automatic Tank Gauge System

Priority LOW 32CWE-190Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
—
Confidentiality · integrity · availability
None · Low · High
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA.

Summary

The TLS4B ATG system is vulnerable to improper handling of Unix time values that exceed the 2038 epoch rollover. When the system clock reaches January 19, 2038, it resets to December 13, 1901, causing authentication failures and disrupting core system functionalities such as login access, history visibility, and leak detection termination. This vulnerability could allow an attacker to manipulate the system time to trigger a denial of service (DoS) condition, leading to administrative lockout, operational timer failures, and corrupted log entries.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00454 39th percentileScored 2026-11-07
Fix Fixed TLS4B Automatic Tank Gauge System (Veeder-Root): 11.A

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Veeder-RootTLS4B Automatic Tank Gauge Systembefore 11.A11.APatch availableCNA
  • TLS4B Automatic Tank Gauge System VendorVeeder-Root Affected before 11.A Fixed in 11.A Patch available CNA

Remediation

  • Fix · CNA TLS4B Automatic Tank Gauge System (Veeder-Root) Fixed in 11.A

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    Veeder-Root TLS4B Automatic Tank Gauge System 11.A

    2 records Highest priority Priority MEDIUM 1 MEDIUM, 1 LOW

    Other records, highest priority first

    • TI-2025-36188 Command Injection in Veeder-Root TLS4B Automatic Tank Gauge SystemPriority MEDIUM 51
    Show all 2 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-55067
  2. 2026-10-03 Alias added: GHSA-prwc-ww33-6c67

References

Other 3

  • TI-2025-36188 Command Injection in Veeder-Root TLS4B Automatic Tank Gauge System CVSS 4.0CRITICAL 9.4

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences