Dover Fueling Solutions vulnerabilities
We track 7 vulnerabilities in Dover Fueling Solutions products across 4 products. 7 are rated high or critical, and none are known to be exploited. The most recent was published on September 18, 2025.
Latest Dover Fueling Solutions vulnerabilities
- 8.2 High severity
ProGauge MagLink LX 4: Integer Overflow or Wraparound
Dover Fueling Solutions ProGauge MagLink LX4 Devices fail to handle Unix time values beyond a certain point. An attacker can manually change the system time to exploit this limitation, potentially causing errors in authentication and leading to a denial-of-ser
- 9.8 Critical severity
ProGauge MagLink LX 4: Use of Hard-coded Cryptographic Key
The secret used for validating authentication tokens is hardcoded in device firmware for affected versions. An attacker who obtains the signing key can bypass authentication, gaining complete access to the system.
- 9.8 Critical severity
ProGauge MagLink LX 4: Use of Weak Credentials
Dover Fueling Solutions ProGauge MagLink LX4 Devices have default root credentials that cannot be changed through standard administrative means. An attacker with network access to the device can gain administrative access to the system.
- 9.8 Critical severity
ProGauge MagLink LX 4: Missing Authentication for Critical Functionality
Dover Fueling Solutions ProGauge MagLink LX Consoles expose an undocumented and unauthenticated target communication framework (TCF) interface on a specific port. Files can be created, deleted, or modified, potentially leading to remote code execution.
- 7.5 High severity
MAGLINK LX Web Console Configuration: Improper Limitation of a Pathname to a Restricted Directory
Dover Fueling Solutions MAGLINK LX Web Console Configuration versions 2.5.1, 2.5.2, 2.5.3, 2.6.1, 2.11, 3.0, 3.2, and 3.3 vulnerable to a path traversal attack, which could allow an attacker to access files stored on the system.
- 8.8 High severity
MAGLINK LX Web Console Configuration: Authentication Bypass by Primary Weakness
Dover Fueling Solutions MAGLINK LX Web Console Configuration versions 2.5.1, 2.5.2, 2.5.3, 2.6.1, 2.11, 3.0, 3.2, and 3.3 could allow a guest user to elevate to admin privileges.
- 9.1 Critical severity
MAGLINK LX Web Console Configuration: Authentication Bypass Using an Alternate Path or Channel
Dover Fueling Solutions MAGLINK LX Web Console Configuration versions 2.5.1, 2.5.2, 2.5.3, 2.6.1, 2.11, 3.0, 3.2, and 3.3 are vulnerable to authentication bypass that could allow an unauthorized attacker to obtain user access.