Undocumented Communication Interface in Dover Fueling Solutions ProGauge MagLink LX Consoles
CVE-2025-5310

9.3CRITICAL

Key Information:

Vendor

Dover Fueling Solutions

Status
Progauge Maglink Lx 4
Progauge Maglink Lx Plus
Progauge Maglink Lx Ultimate
Vendor
CVE Published:
27 June 2025

What is CVE-2025-5310?

Dover Fueling Solutions ProGauge MagLink LX Consoles have a significant vulnerability due to an undocumented, unauthenticated target communication framework. This interface is exposed on a specific port, allowing for potentially malicious actors to create, delete, or modify files on the system. Such access could facilitate remote code execution, making it crucial for users to assess their security posture around these devices.

Affected Version(s)

ProGauge MagLink LX 4 0 < 4.20.3

ProGauge MagLink LX Plus 0 < 4.20.3

ProGauge MagLink LX Ultimate 0 < 5.20.3

References

https://www.cisa.gov/news-events/ics-advisories/icsa-25-1...
https://ociocisa.sharepoint.com/teams/JCDC-ProductionOffi...

CVSS V4

Score:
9.3
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Souvik Kandar of Microsec reported this vulnerability to CISA.
.
CVE-2025-5310 : Undocumented Communication Interface in Dover Fueling Solutions ProGauge MagLink LX Consoles