CVEvulnerability

CVE-2013-7248

10.0 HIGH Published 2014-01-26 Modified 2026-06-17 Official page ↗

Status: Modified
Published: 2014-01-26
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 2.0 ([email protected]): 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses: CWE-255

Description

Franklin Fueling Systems TS-550 evo with firmware 2.0.0.6833 and other versions before 2.4.0 has a hardcoded password for the roleDiag account, which allows remote attackers to gain root privileges, as demonstrated using a cmdWebCheckRole action in a TSA_REQUEST.

Affected configurations

• franklinfueling ts-550 evo firmware 2.0.0.6833 • franklinfueling ts-550 evo firmware 2.3.1.7492 • franklinfueling ts-550 evo

Weakness · not in database (1)

CWE-255

References

https://www.trustwave.com/spiderlabs/advisories/TWSL2014-001.txt Exploit
https://www.trustwave.com/spiderlabs/advisories/TWSL2014-001.txt Exploit

CVE-2013-7248

Description

Affected configurations

Related

Weakness · not in database (1)

References