franklinfueling TS-550 evo firmware 2.3.0.7332
Approved changes feed: RSS · Atom
cpe:2.3:o:franklinfueling:ts-550_evo_firmware:2.3.0.7332:*:*:*:*:*:*:*
part: o version: 2.3.0.7332 update: *
| Vendor | Franklinfueling (015ad85e-974e-5e27-9dcc-b4237bf272b4) |
|---|---|
| Product | Ts 550 Evo Firmware (ce1c3a86-ef59-55c9-983b-3239fdf2324a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2017-6565 |
vulnerable | 2026-06-08 05:09:51.520443 |
Details available
On Franklin Fueling Systems TS-550 evo 2.3.0.7332 devices, the roleDiag user, which can be obtained by exploiting CVE-2013-7247, has the ability to upload files to the server hosting the web service. As no sanitization checks are in place, an attacker can upload a malicious payload.
Published: 2017-05-01T19:00:00.000Z
Updated: 2024-08-05T15:33:20.450Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-6564 |
vulnerable | 2026-06-08 05:09:51.518996 |
Details available
On Franklin Fueling Systems TS-550 evo 2.3.0.7332 devices, the Guest user, which contains the lowest privileges, can post to the idSourceFileName parameter found within the /download directory. This ability allows for an attacker to download sensitive system files from the host machine such as databases which contain information that can aid in further attacks.
Published: 2017-05-01T19:00:00.000Z
Updated: 2024-08-05T15:33:20.118Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.