Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2025-54807

Dover Fueling Solutions ProGauge MagLink LX 4 Devices Use of Hard-coded Cryptographic Key

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

The secret used for validating authentication tokens is hardcoded in device firmware for affected versions. An attacker who obtains the signing key can bypass authentication, gaining complete access to the system.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Dover Fueling Solutions ProGauge MagLink LX 4

Default version status: unaffected

  • 0 to < 4.20.3affected

Dover Fueling Solutions ProGauge MagLink LX Plus

Default version status: unaffected

  • 0 to < 4.20.3affected

Dover Fueling Solutions ProGauge MagLink LX Ultimate

Default version status: unaffected

  • 0 to < 5.20.3affected

References