Settings Modification Vulnerability in Fuel Monitoring System by Vendor Name
CVE-2025-2567

9.3CRITICAL

Key Information:

Vendor

Lantronix

Status
Xport
Vendor
CVE Published:
15 April 2025

What is CVE-2025-2567?

An attacker may exploit a vulnerability in the Fuel Monitoring System, allowing them to alter or disable crucial settings. This could disrupt monitoring processes and supply chain operations, potentially leading to the disabling of Automatic Tank Gauging (ATG) monitoring. Such an event raises serious safety concerns in fuel storage and transportation, endangering both equipment and personnel.

Affected Version(s)

Xport 6.5.0.7 <= 7.0.0.3

References

https://www.cisa.gov/news-events/ics-advisories/icsa-25-1...

CVSS V4

Score:
9.3
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Souvik Kandar from Microsec(microsec.io) reported this vulnerability to CISA.
.