medium5.0Public exploit code
CVE-2013-7247
cgi-bin/tsaws.cgi in Franklin Fueling Systems TS-550 evo with firmware 2.0.0.6833 and other versions before 2.4.0 allows remote attackers to discover sensitive…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Franklin Fueling TS-550 evo 2.0.0.6833 - Multiple Vulnerabilities2014-01-24 · webapps · hardware · Verified
Impact
cgi-bin/tsaws.cgi in Franklin Fueling Systems TS-550 evo with firmware 2.0.0.6833 and other versions before 2.4.0 allows remote attackers to discover sensitive information (user names and password hashes) via the cmdWebGetConfiguration action in a TSA_REQUEST.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Franklinfueling | Ts-550 Evo Firmware | Versions 2.0.0.6833, 2.3.1.7492 |
| Franklinfueling | Ts-550 Evo | All versions |