Progauge Maglink Lx Plus
Approved changes feed: RSS · Atom
cpe:2.3:a:dover_fueling_solutions:progauge_maglink_lx_plus:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Dover Fueling Solutions (086088fe-45ba-5f6a-a2ca-87871adaebfa) |
|---|---|
| Product | Progauge Maglink Lx Plus (5abc7470-62af-5a6f-81d5-95cb6e708d06) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-5310 |
vulnerable | 2026-06-08 07:35:24.620188 |
Dover Fueling Solutions ProGauge MagLink LX Consoles Missing Authentication for Critical Function
CRITICAL (9.8)
Dover Fueling Solutions ProGauge MagLink LX Consoles expose an undocumented and unauthenticated target communication framework (TCF) interface on a specific port. Files can be created, deleted, or modified, potentially leading to remote code execution.
Published: 2025-06-27T17:22:02.680Z
Updated: 2025-06-27T17:41:45.800Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-55068 |
vulnerable | 2026-06-08 07:33:14.027913 |
Dover Fueling Solutions ProGauge MagLink LX4 Devices Integer Overflow or Wraparound
HIGH (8.2)
Dover Fueling Solutions ProGauge MagLink LX4 Devices fail to handle Unix time values beyond a certain point.
An attacker can manually change the system time to exploit this
limitation, potentially causing errors in authentication and leading to a
denial-of-service condition.
Published: 2025-09-18T20:42:29.547Z
Updated: 2025-09-19T13:06:42.627Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-54807 |
vulnerable | 2026-06-08 07:33:13.255005 |
Dover Fueling Solutions ProGauge MagLink LX 4 Devices Use of Hard-coded Cryptographic Key
CRITICAL (9.8)
The secret used for validating authentication tokens is hardcoded in
device firmware for affected versions. An attacker who obtains the
signing key can bypass authentication, gaining complete access to the
system.
Published: 2025-09-18T20:44:04.094Z
Updated: 2026-06-04T20:00:51.429Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-30519 |
vulnerable | 2026-06-08 07:17:00.563822 |
Dover Fueling Solutions ProGauge MagLink LX4 Devices Use of Weak Credentials
CRITICAL (9.8)
Dover Fueling Solutions ProGauge MagLink LX4 Devices have default root credentials that cannot be changed through standard
administrative means. An attacker with network access to the device can
gain administrative access to the system.
Published: 2025-09-18T20:46:42.642Z
Updated: 2025-09-19T13:05:20.889Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.