PT-2023-32377 · Franklin Fueling Systems · Franklin Fueling Systems Ts-550 Evo

Publicado 2023-11-02 · Atualizado 2023-11-09 · CVE-2023-5846

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Franklin Fueling System TS-550 versions prior to 1.9.23.8960

Description The issue allows attackers to decode admin credentials, resulting in unauthenticated access to the device. This can lead to unauthorized control and potential malicious activities.

Recommendations For Franklin Fueling System TS-550 versions prior to 1.9.23.8960, update to version 1.9.23.8960 or later to resolve the issue. As a temporary workaround, consider restricting access to the device and its administrative interface until the update can be applied.

Correção

Enumeração de Fraquezas

CWE-916

Identificadores relacionados

CVE-2023-5846

Produtos afetados

Franklin Fueling Systems Ts-550 Evo

Referências · 9

• https://osv.dev/vulnerability/CVE-2023-5846 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/1720127618094375269 · Publicação no Twitter
• https://t.me/cibsecurity/73463 · Publicação no Telegram
• https://t.me/cvenotify/60402 · Publicação no Telegram
• https://twitter.com/VulmonFeeds/status/1720146342410858689 · Publicação no Twitter
• https://t.me/cvenotify/60386 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-5846 · Nota de Segurança
• https://cisa.gov/news-events/ics-advisories/icsa-23-306-04 · Nota
• https://twitter.com/cracbot/status/1720381956053958993 · Publicação no Twitter