PT-2023-32377 · Franklin Fueling Systems · Franklin Fueling Systems Ts-550 Evo

Published 2023-11-02 · Updated 2023-11-09 · CVE-2023-5846

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Franklin Fueling System TS-550 versions prior to 1.9.23.8960

Description The issue allows attackers to decode admin credentials, resulting in unauthenticated access to the device. This can lead to unauthorized control and potential malicious activities.

Recommendations For Franklin Fueling System TS-550 versions prior to 1.9.23.8960, update to version 1.9.23.8960 or later to resolve the issue. As a temporary workaround, consider restricting access to the device and its administrative interface until the update can be applied.

Fix

Weakness Enumeration

CWE-916

Related Identifiers

CVE-2023-5846

Affected Products

Franklin Fueling Systems Ts-550 Evo

References · 9

• https://osv.dev/vulnerability/CVE-2023-5846 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-5846 · Security Note
• https://twitter.com/CVEnew/status/1720127618094375269 · Twitter Post
• https://t.me/cibsecurity/73463 · Telegram Post
• https://t.me/cvenotify/60402 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1720146342410858689 · Twitter Post
• https://t.me/cvenotify/60386 · Telegram Post
• https://cisa.gov/news-events/ics-advisories/icsa-23-306-04 · Note
• https://twitter.com/cracbot/status/1720381956053958993 · Twitter Post