What is CVE-2025-54807?

CVE-2025-54807 is a critical-severity vulnerability in Dover Fueling Solutions Progauge Maglink Lx 4, classified under Use of Hard-coded Cryptographic Key. CVSS score: 9.8/10. Published 2025-09-18.

How severe is CVE-2025-54807?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Vulnerability in Dover Fueling Solutions Progauge Maglink Lx 4

CVE-2025-54807

The secret used for validating authentication tokens is hardcoded in device firmware for affected versions. An attacker who obtains the signing key can bypass authentication, gaining complete access to the system.

EPSS: 0.007 (48.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Dover Fueling Solutions Progauge Maglink Lx 4 — versions 0
Dover Fueling Solutions Progauge Maglink Lx Plus — versions 0
Dover Fueling Solutions Progauge Maglink Lx Ultimate — versions 0

Weakness classification (CWE)

CWE-321 — Use of Hard-coded Cryptographic Key

References

Frequently asked questions

What is CVE-2025-54807?: CVE-2025-54807 is a critical-severity vulnerability in Dover Fueling Solutions Progauge Maglink Lx 4, classified under Use of Hard-coded Cryptographic Key. CVSS score: 9.8/10. Published 2025-09-18.
How severe is CVE-2025-54807?: Critical severity. CVSS v3 base score is 9.8 out of 10.