CVE-2025-30519CWE-1391

CVE-2025-30519

Critical · published September 19, 2025

CVSS v3.1
9.8
EPSS
0%
Percentile
36.8
In the wild
Unconfirmed
What it is

🚨 Default root credentials still in play! The Dover Fueling Solutions ProGauge MagLink LX4 Devices let anyone with network access saunter in as an admin. 🔥 Think of it like leaving the front door of your gas station wide open, with a welcome mat that says 'Help yourself to everything!' It’s an incredibly inviting setup that attackers can easily exploit without breaking a sweat. An attacker could gain full administrative control of the device, potentially manipulating system settings and data. This could lead to unauthorized access to sensitive information, disruption of services, or even causing financial losses—an absolute nightmare for any business relying on these devices!

Put simply

Think of it like leaving the front door of your gas station wide open, with a welcome mat that says 'Help yourself to everything!' It’s an incredibly inviting setup that attackers can easily exploit without breaking a sweat. This vulnerability arises from hardcoded default root credentials that cannot be altered through standard admin channels, allowing network-accessible attackers to gain full control of the device.

What to do

An attacker could gain full administrative control of the device, potentially manipulating system settings and data. This could lead to unauthorized access to sensitive information, disruption of services, or even causing financial losses—an absolute nightmare for any business relying on these devices! Immediately change any default credentials and implement network segmentation to limit access to these devices. Ensure that only authorized personnel can reach the ProGauge MagLink LX4 Devices and regularly review network access logs for any suspicious activity. There's no time to waste! You've got this! By taking the right steps, you can lock down your systems and keep them safe from intruders. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00436 · 36.8th percentile
Weakness
CWE-1391 · Use of Weak Credentials
Published
2025-09-19T01:15Z
References (2)
EPSS history
Timeline
  • 18 SEP 20:46Z
    Dover Fueling Solutions ProGauge MagLink LX4 Devices Use of Weak Credentials
    cvelistv5