CVE-2017-6564
01.05.2017, 19:59
On Franklin Fueling Systems TS-550 evo 2.3.0.7332 devices, the Guest user, which contains the lowest privileges, can post to the idSourceFileName parameter found within the /download directory. This ability allows for an attacker to download sensitive system files from the host machine such as databases which contain information that can aid in further attacks.Enginsight
| Vendor | Product | Version |
|---|---|---|
| franklinfueling | ts-550_evo_firmware | 2.3.0.7332 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration