CVE-2017-6564 - CVE House
Back to Database
Status published Medium CVE-2017-6564

On Franklin Fueling Systems TS-550 evo 2.3.0.7332 devices, the Guest...

Vulnerability Description

On Franklin Fueling Systems TS-550 evo 2.3.0.7332 devices, the Guest user, which contains the lowest privileges, can post to the idSourceFileName parameter found within the /download directory. This ability allows for an attacker to download sensitive system files from the host machine such as databases which contain information that can aid in further attacks.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2017-6564

Credits & Attribution

No credits recorded in the NVD database.

References

More from franklinfueling

View All →
CVE-2022-44039
Franklin Fueling System FFS Colibri 1.9.22.8925 is affected by: File...
Unknown 0
CVE-2021-46421
Franklin Fueling Systems FFS T5 Series 1.8.7.7299 is affected by...
High 7.5
CVE-2021-46420
Franklin Fueling Systems FFS TS-550 evo 2.23.4.8936 is affected by...
High 7.5
CVE-2021-46417
Insecure handling of a download function leads to disclosure of...
High 7.5
CVE-2017-6565
On Franklin Fueling Systems TS-550 evo 2.3.0.7332 devices, the roleDiag...
High 8.8

Affected Vendor

franklinfueling

View all reports →

Affected Software

ts-550 evo firmware
Vulnerable Versions:
2.3.0.7332

Timeline

Official Publish: May 1st, 2017
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.