Veeder-Root Tls4B Automatic Tank Gauge System vulnerabilities

CVE-2025-58428 [CRITICAL] CWE-77 CVE-2025-58428: The TLS4B ATG system's SOAP-based interface is vulnerable due to its accessibility through the web s The TLS4B ATG system's SOAP-based interface is vulnerable due to its accessibility through the web services handler. This vulnerability enables remote attackers with valid credentials to execute system-level commands on the underlying Linux system. This could allow the attacker to achieve remote command execution, full shell access, and potential l

CVE-2025-55067 [HIGH] CWE-190 CVE-2025-55067: The TLS4B ATG system is vulnerable to improper handling of Unix time values that exceed the 2038 epo The TLS4B ATG system is vulnerable to improper handling of Unix time values that exceed the 2038 epoch rollover. When the system clock reaches January 19, 2038, it resets to December 13, 1901, causing authentication failures and disrupting core system functionalities such as login access, history visibility, and leak detection termination. This vulner