CVE-2025-54807
Critical
Description
The secret used for validating authentication tokens is hardcoded in device firmware for affected versions. An attacker who obtains the signing key can bypass authentication, gaining complete access to the system.
SeverityCritical
CVSS9.8
Exploit probability—
ProductProGauge MagLink LX 4
PublishedSep 18, 2025
First seenSep 18, 2025
Weakness typeCWE-321CWE-321
How to fix
Update
- Dover Fueling Solutions ProGauge MagLink LX 44.20.3 or later
- Dover Fueling Solutions ProGauge MagLink LX Plus4.20.3 or later
- Dover Fueling Solutions ProGauge MagLink LX Ultimate5.20.3 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Dover Fueling Solutions ProGauge MagLink LX 4 | v < 4.20.3 | 4.20.3 |
| Dover Fueling Solutions ProGauge MagLink LX Plus | v < 4.20.3 | 4.20.3 |
| Dover Fueling Solutions ProGauge MagLink LX Ultimate | v < 5.20.3 | 5.20.3 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.