Description
Dover Fueling Solutions ProGauge MagLink LX4 Devices fail to handle Unix time values beyond a certain point.
An attacker can manually change the system time to exploit this
limitation, potentially causing errors in authentication and leading to a
denial-of-service condition.
Published: 2025-09-18
Score: 8.8 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

Vendor Solution

Dover Fueling Solutions recommends users update their ProGauge MagLink devices to Version 4.20.3 or later for MagLink LX 4 and MagLink LX Plus models. The upgrade can be downloaded from the Dover Fueling Solutions website https://www.doverfuelingsolutions.com/mea/en/products-and-solutions/automatic-tank-gauging/consoles/progauge-maglink-lx-4-console.html  .For MagLink LX Ultimate devices, Dover Fueling Solutions recommends users update to version 5.20.3 https://www.doverfuelingsolutions.com/mea/en/products-and-solutions/automatic-tank-gauging/consoles/progauge-maglink-lx-ultimate-console.html  or later. Dover Fueling Solutions recommends all users install the software behind a firewall to minimize risk of remote attacks.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2025-30196 Dover Fueling Solutions ProGauge MagLink LX4 Devices fail to handle Unix time values beyond a certain point. An attacker can manually change the system time to exploit this limitation, potentially causing errors in authentication and leading to a denial-of-service condition.
History

Fri, 19 Sep 2025 13:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Fri, 19 Sep 2025 09:45:00 +0000

Type Values Removed Values Added
First Time appeared Doverfuelingsolutions
Doverfuelingsolutions progauge Maglink Lx Console
Vendors & Products Doverfuelingsolutions
Doverfuelingsolutions progauge Maglink Lx Console

Thu, 18 Sep 2025 21:00:00 +0000

Type Values Removed Values Added
Description Dover Fueling Solutions ProGauge MagLink LX4 Devices fail to handle Unix time values beyond a certain point. An attacker can manually change the system time to exploit this limitation, potentially causing errors in authentication and leading to a denial-of-service condition.
Title Dover Fueling Solutions ProGauge MagLink LX4 Devices Integer Overflow or Wraparound
Weaknesses CWE-190
References
Metrics cvssV3_1

{'score': 8.2, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H'}

cvssV4_0

{'score': 8.8, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N'}

Subscriptions

Doverfuelingsolutions Progauge Maglink Lx Console
cve-icon MITRE

Status: PUBLISHED

Assigner: icscert

Published:

Updated: 2025-09-19T13:06:42.627Z

Reserved: 2025-08-18T15:32:05.574Z

Link: CVE-2025-55068

cve-icon Vulnrichment

Updated: 2025-09-19T13:06:38.448Z

cve-icon NVD

Status : Deferred

Published: 2025-09-18T21:15:48.667

Modified: 2026-04-15T00:35:42.020

Link: CVE-2025-55068

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2025-09-19T09:35:22Z

Weaknesses