Back to Database
Status published
High
CVE-2021-46417
Insecure handling of a download function leads to disclosure of...
Vulnerability Description
Insecure handling of a download function leads to disclosure of internal files due to path traversal with root privileges in Franklin Fueling Systems Colibri Controller Module 1.8.19.8580.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-46417
Credits & Attribution
No credits recorded in the NVD database.
References
- https://drive.google.com/drive/folders/1Yu4aVDdrgvs-F9jP3R8Cw7qo_TC7VB-R
- http://packetstormsecurity.com/files/166610/FFS-Colibri-Controller-Module-1.8.19.8580-Directory-Traversal.html
- http://packetstormsecurity.com/files/166671/Franklin-Fueling-Systems-Colibri-Controller-Module-1.8.19.8580-Local-File-Inclusion.html
More from franklinfueling
View All →CVE-2022-44039
Franklin Fueling System FFS Colibri 1.9.22.8925 is affected by: File...
Unknown
0
CVE-2021-46421
Franklin Fueling Systems FFS T5 Series 1.8.7.7299 is affected by...
High
7.5
CVE-2021-46420
Franklin Fueling Systems FFS TS-550 evo 2.23.4.8936 is affected by...
High
7.5
CVE-2017-6565
On Franklin Fueling Systems TS-550 evo 2.3.0.7332 devices, the roleDiag...
High
8.8
CVE-2017-6564
On Franklin Fueling Systems TS-550 evo 2.3.0.7332 devices, the Guest...
Medium
6.5
Affected Vendor
franklinfueling
View all reports →Affected Software
colibri firmware
Vulnerable Versions:
1.8.19.8580
Timeline
Official Publish:
April 7th, 2022
Last Modified:
August 4th, 2024
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.