By rssfeeds-admin A critical security flaw (CVE-2025-5310) in Dover Fueling Solutions’ ProGauge MagLink LX consoles could allow attackers to hijack fuel station monitoring systems, manipulate operations, or deploy malware.
The vulnerability, rated 9.8 on CVSS v3 and 9.2 on CVSS v4, affects widely deployed tank gauges used globally in transportation infrastructure.
Technical Impact and Affected Systems
The vulnerability stems from an undocumented, unauthenticated Target Communication Framework (TCF) interface exposed on a specific port.
Attackers can remotely create, modify, or delete files, potentially leading to full device compromise and operational disruption.
Affected Products and Versions:
| Product Type | Vulnerable Versions | Patched Version |
|---|---|---|
| ProGauge MagLink LX 4 | Before 4.20.3 | 4.20.3 or later |
| ProGauge MagLink LX Plus | Before 5.20.3 | 4.20.3 or later |
| ProGauge MagLink LX Ultimate | Prior to 5.20.3 | 5.20.3 or later |
Successful exploitation enables:
- Manipulation of fueling operations
- Deletion of system configurations
- Malware deployment
- Unauthorized remote code execution.
Mitigation Strategies
Dover Fueling Solutions mandates immediate updates:
- LX 4/LX Plus models: Upgrade to v4.20.3+ via official portal.
- LX Ultimate models: Install v5.20.3+13.
CISA recommends additional safeguards:
- Network segmentation: Isolate consoles behind firewalls; block internet access.
- Secure remote access: Use updated VPNs with strict device security policies.
- Proactive monitoring: Report anomalies to CISA for incident correlation.
No public exploits targeting CVE-2025-5310 have been confirmed, but the flaw’s critical severity and low attack complexity necessitate urgent action.
Souvik Kandar of Microsec discovered the vulnerability, prompting coordinated disclosure with CISA on June 17, 2025.
Fuel retailers globally should prioritize patching, as these consoles monitor fuel/water tanks across critical transportation infrastructure.
CISA’s Defense-in-Depth strategies provide further guidance for securing operational technology.
Find this Story Interesting! Follow us on LinkedIn and X to Get More Instant updates
The post Dover Fueling Solutions Vulnerability Allows Attackers to Manipulate Fueling Operations appeared first on Cyber Security News.
Discover more from RSS Feeds Cloud
Subscribe to get the latest posts sent to your email.