CVE-2025-55068: Dover MagLink LX4 DoS Vulnerability

CVE-2025-55068 Overview

Dover Fueling Solutions ProGauge MagLink LX4 Devices fail to handle Unix time values beyond a certain point. An attacker can manually change the system time to exploit this limitation, potentially causing errors in authentication and leading to a denial-of-service condition. This integer overflow vulnerability (CWE-190) affects industrial control system (ICS) devices used in fuel dispensing and tank gauging environments.

Critical Impact

Network-accessible attackers can exploit improper time handling to cause authentication failures and denial-of-service conditions in critical fuel management infrastructure.

Affected Products

• Dover Fueling Solutions ProGauge MagLink LX4 Console
• ProGauge MagLink LX Series Automatic Tank Gauging Systems
• Associated firmware versions with vulnerable Unix time handling

Discovery Timeline

• 2025-09-18 - CVE-2025-55068 published to NVD
• 2026-04-15 - Last updated in NVD database

Technical Details for CVE-2025-55068

Vulnerability Analysis

This vulnerability stems from an integer overflow condition (CWE-190) in the Unix time handling mechanism of the ProGauge MagLink LX4 devices. The device fails to properly handle Unix timestamp values that exceed certain boundaries, which can occur when system time is manipulated or advances beyond expected ranges.

When the Unix time value overflows the expected integer boundaries, the authentication subsystem encounters unexpected states. This can result in authentication bypass attempts or complete service disruption. The network-accessible nature of this vulnerability means that attackers who can communicate with exposed devices may be able to trigger the condition remotely.

The impact manifests primarily as a denial-of-service condition, with potential integrity implications where authentication validation may behave unexpectedly. Given that these devices are deployed in fuel management and automatic tank gauging environments, service disruption could have significant operational consequences for fuel station operations.

Root Cause

The root cause is an integer overflow vulnerability (CWE-190) in the Unix time processing logic. The system does not properly validate or handle time values that exceed the boundaries of the integer data type used for timestamp storage and calculations. When time values wrap around or exceed these boundaries, the device enters an error state that affects authentication processing and overall system availability.

Attack Vector

The attack vector is network-based, requiring no authentication or user interaction. An attacker with network access to the vulnerable device can manipulate system time parameters or wait for natural time progression to trigger the overflow condition. The exploitation does not require special privileges, making it accessible to any network-adjacent threat actor.

The attack can be performed by:

1. Gaining network access to the ProGauge MagLink LX4 device
2. Manipulating system time values through available interfaces
3. Setting time values that cause integer overflow in the timestamp handling logic
4. Observing authentication errors and service disruption as the system fails to process the overflowed values

Detection Methods for CVE-2025-55068

Indicators of Compromise

• Unexpected system time changes on ProGauge MagLink LX4 devices
• Authentication failures occurring in patterns correlated with unusual timestamp values
• Device logs showing time-related errors or unexpected reboot cycles
• Network traffic attempting to modify time synchronization settings

Detection Strategies

• Monitor NTP and time synchronization protocols for anomalous activity targeting ICS devices
• Implement network segmentation monitoring to detect unauthorized access to fuel management systems
• Deploy industrial protocol-aware intrusion detection systems
• Review authentication logs for patterns indicating time-based manipulation attempts

Monitoring Recommendations

• Enable verbose logging on ProGauge MagLink LX4 consoles where available
• Monitor network traffic to and from automatic tank gauging systems
• Implement alerting for time synchronization changes on critical ICS infrastructure
• Establish baseline behavior patterns for device authentication events

How to Mitigate CVE-2025-55068

Immediate Actions Required

• Review network exposure of ProGauge MagLink LX4 devices and restrict access to authorized personnel only
• Implement network segmentation to isolate fuel management systems from general network traffic
• Monitor devices for signs of exploitation or unusual behavior
• Contact Dover Fueling Solutions for firmware updates and security guidance

Patch Information

Organizations should consult the CISA ICS Advisory ICSA-25-261-07 for official mitigation guidance and patch availability. Additional product information is available from Dover Fueling Solutions.

Workarounds

• Implement strict network access controls limiting connectivity to the affected devices
• Deploy firewall rules to restrict time synchronization protocol access from untrusted sources
• Enable network monitoring and alerting for any attempts to modify device time settings
• Consider placing affected devices behind VPN access for remote management scenarios
• Implement defense-in-depth measures including physical security controls for fuel management infrastructure

Organizations should implement network isolation for ICS devices by configuring firewall rules to restrict access. Time synchronization services should be limited to trusted internal NTP servers only, and external time sources should be blocked at the network perimeter for these critical systems.