CVE-2025-5310 CRITICAL

CVE-2025-5310: Dover Fueling Solutions ProGauge MagLink LX Consoles Missing Authentication for Critical Function

Vendor Dover Fueling Solutions
Product ProGauge MagLink LX 4
Weakness CWE-306 · Missing auth
Published June 27, 2025
Last update June 27, 2025
View on NVD All CVEs

CVSS base score

9.8/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

Dover Fueling Solutions ProGauge MagLink LX Consoles expose an undocumented and unauthenticated target communication framework (TCF) interface on a specific port. Files can be created, deleted, or modified, potentially leading to remote code execution.

Key dates

02Disclosure timeline

June 27, 2025 CVE published
June 27, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2026-6577 liangliangyy DjangoBlog logtracks Endpoint views.py missing authentication CVE-2020-3333 Cisco Application Services Engine Software Unauthenticated Event Policies Update Vulnerability CVE-2024-21846 Electrolink FM/DAB/TV Transmitter Missing Authentication for Critical Function CVE-2026-28485 OpenClaw 2026.1.5 < 2026.2.12 - Missing Authentication in Browser Control HTTP Endpoints CVE-2021-20990 Fibaro Home Center Unauthenticated access to shutdown, reboot and reboot to recovery mode