Back to Database
Status published
Critical
CVE-2025-54807
Dover Fueling Solutions ProGauge MagLink LX 4 Devices Use of Hard-coded Cryptographic Key
Vulnerability Description
The secret used for validating authentication tokens is hardcoded in device firmware for affected versions. An attacker who obtains the signing key can bypass authentication, gaining complete access to the system.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-54807
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Pedro Umbelino of Bitsight TRACE reported these vulnerabilities to CISA.
References
More from Dover Fueling Solutions
View All →CVE-2025-5310
Dover Fueling Solutions ProGauge MagLink LX Consoles Missing Authentication for Critical Function
Critical
9.3
CVE-2025-55068
Dover Fueling Solutions ProGauge MagLink LX4 Devices Integer Overflow or Wraparound
High
8.8
CVE-2025-30519
Dover Fueling Solutions ProGauge MagLink LX4 Devices Use of Weak Credentials
Critical
9.3
CVE-2023-41256
Dover Fueling Solutions MAGLINK LX Console Authentication Bypass
Critical
9.1
CVE-2023-38256
Dover Fueling Solutions MAGLINK LX Console Path Traversal
Medium
6.8
Affected Vendor
Dover Fueling Solutions
View all reports →Affected Software
ProGauge MagLink LX 4, ProGauge MagLink LX Plus, ProGauge MagLink LX Ultimate
Vulnerable Versions:
0
Timeline
Official Publish:
September 18th, 2025
Last Modified:
June 4th, 2026
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H