Dover Fueling Solutions ProGauge MagLink LX4 Devices Default Root Credentials Vulnerability

A vulnerability exists in Dover Fueling Solutions ProGauge MagLink LX4 devices, including the LX4, LX4 Plus, and LX4 Ultimate models, all prior to specific version updates. These devices come with default root credentials that cannot be changed through standard administrative methods. An attacker with network access to the device can exploit this flaw to gain administrative access.

Impact

Exploitation of this vulnerability allows for unauthorized administrative access to the affected device.

Remediation

Users are advised to update ProGauge MagLink LX4 devices to version 4.20.3 or later. For MagLink LX Ultimate devices, users should update to version 5.20.3 or later. The updates can be downloaded from the Dover Fueling Solutions website. Additionally, it is recommended to install the software behind a firewall to reduce the risk of remote attacks.