CVE-2025-30519

CRITICAL

Dover Fueling Solutions ProGauge MagLink LX4 Devices have default root credentials that cannot be changed through standard administrative means. An attacker with network access to the device can ...

Affects 0 products across 1 vendor.

CVSS 3.19.8
CVSS v49.3
EPSS0.4%
Percentile37th
PatchUnknown
CVSS Vector — Plain English Remotely exploitable over the network, low complexity, no authentication required, no user interaction needed, impact contained to the vulnerable component, full confidentiality impact, full integrity impact, full availability impact.
CWE Weakness Definitions
CWE-1391: CWE-1391
◆ AI Analysis — automated analysis, not human-reviewed

Dover Fueling Solutions ProGauge MagLink LX4 Devices are vulnerable due to default root credentials that cannot be changed through standard administrative means, allowing attackers with network access to gain administrative control.

BSID: BS-2025-GLOBAL-251666-C • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: HIGH

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2025-30519?
Dover Fueling Solutions ProGauge MagLink LX4 Devices are vulnerable due to default root credentials that cannot be changed through standard administrative means, allowing attackers with network access to gain administrative control.
What is the CVSS score for CVE-2025-30519?
CVE-2025-30519 has CVSS 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS: 0.4%.
Is CVE-2025-30519 actively exploited?
No confirmed active exploitation of CVE-2025-30519 as of 2026-10-24.
How do I remediate CVE-2025-30519?
Priority: IMMEDIATE. Advisory: https://www.cisa.gov/news-events/ics-advisories/icsa-25-261-07
What systems are affected by CVE-2025-30519?
CVE-2025-30519 affects Cannot.
Vulnerability Details
CVE IDCVE-2025-30519
BSIDBS-2025-GLOBAL-251666-C BreachSpider Global ID
CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Published2025-09-18
Last Modified2026-10-18
ICS Relevance0%
Weakness (CWE)
CWE-1391
SourceNVD
Official Description

Dover Fueling Solutions ProGauge MagLink LX4 Devices have default root credentials that cannot be changed through standard administrative means. An attacker with network access to the device can gain administrative access to the system.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

An attacker can exploit this vulnerability by connecting to the device's network and using the default root credentials to log in and gain administrative access.

Exploitation Likelihood: HIGH

Affected Products
VendorProductAffected Versions
Cannot — —
Remediation
View CISA ICS Advisory →

Remediation Priority: IMMEDIATE

Threat Intelligence
● Threat Intelligence Validated: October 2026 | Threat Age: 400 Days
CISA known-exploitedNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
AI Enrichment Record — provenance & audit hash
Model/workspace/models/qwen2.5-coder-32b-instruct-bf16
ConfidenceHIGH
Enriched At2026-05-24
SHA-512 Audit Hash3eed68e3fdf5f32b3d74fe9fa940948117931245d96fc7a852d525759a3963484204d46acd45678bc2e76835a83e81309976bbe9fd7b1ace18ec5b97165dde03
Related CVEs affecting Cannot
CVE-2025-43982 9.8 Shenzhen Tuoshi NR500-EA RG500UEAABxCOMSLICv3.4.2731.16.43 devices enable the... CVE-2025-40343 9.8 In the Linux kernel, the following vulnerability has been resolved: nvmet-fc... CVE-2025-40350 9.8 In the Linux kernel, the following vulnerability has been resolved: net/mlx5... CVE-2025-68359 9.8 In the Linux kernel, the following vulnerability has been resolved: btrfs: f... CVE-2020-36846 9.8 A buffer overflow, as described in CVE-2020-8927, exists in the embedded Brot...
View all Cannot CVEs →

Critical Severity - Know Your Exposure

A CVSS 9.8 vulnerability in your ICS environment cannot wait. BreachSpider maps critical CVEs to your specific assets and tells you what to fix first.

Create a free account →