critical10.0Public exploit code
CVE-2013-7248
Franklin Fueling Systems TS-550 evo with firmware 2.0.0.6833 and other versions before 2.4.0 has a hardcoded password for the roleDiag account, which allows re…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Franklin Fueling TS-550 evo 2.0.0.6833 - Multiple Vulnerabilities2014-01-24 · webapps · hardware · Verified
Impact
Franklin Fueling Systems TS-550 evo with firmware 2.0.0.6833 and other versions before 2.4.0 has a hardcoded password for the roleDiag account, which allows remote attackers to gain root privileges, as demonstrated using a cmdWebCheckRole action in a TSA_REQUEST.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Franklinfueling | Ts-550 Evo Firmware | Versions 2.0.0.6833, 2.3.1.7492 |
| Franklinfueling | Ts-550 Evo | All versions |