Vulnerabilities

TI-2025-21794 CVE-2025-30519 · GHSA-3fgm-3m4r-2x8g

Dover Fueling Solutions ProGauge MagLink LX4 Devices Use of Weak Credentials

MEDIUM 48

Dover Fueling Solutions ProGauge MagLink LX4 Devices have default root credentials that cannot be changed through standard administrative means.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00451 Published 2025-09-18 Fixed in 4.20.3, 5.20.3 CWE-1391

TI-2025-34561 CVE-2025-54807 · GHSA-fmx3-xgw6-w7g2

MEDIUM 49

The secret used for validating authentication tokens is hardcoded in device firmware for affected versions.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00749 Published 2025-09-18 Fixed in 4.20.3, 5.20.3 CWE-321

TI-2025-34758 CVE-2025-55068 · GHSA-8jc3-4878-j8q8

MEDIUM 44

Dover Fueling Solutions ProGauge MagLink LX4 Devices fail to handle Unix time values beyond a certain point.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00411 Published 2025-09-18 Fixed in 4.20.3, 5.20.3 CWE-190