CVE-2025-54807
Dover Fueling Solutions ProGauge MagLink LX 4 Devices Use of Hard-coded Cryptographic Key
- State
- Published
- Severity
- 9.3 Critical
- Published
- Sep 18, 2025
- Updated
- Jun 4, 2026
- Reserved
- Aug 18, 2025
Description
The secret used for validating authentication tokens is hardcoded in device firmware for affected versions. An attacker who obtains the signing key can bypass authentication, gaining complete access to the system.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 9.3 Critical | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N | icscert |
| 3.1 | 9.8 Critical | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | icscert |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
ProGauge MagLink LX 4Dover Fueling Solutions |
|
ProGauge MagLink LX PlusDover Fueling Solutions |
|
ProGauge MagLink LX UltimateDover Fueling Solutions |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.