CVE-2017-6565

2017-05-0119:00:00

mitre

www.cve.org

8.6 High

AI Score

Confidence

High

0.008 Low

EPSS

Percentile

81.4%

JSON

On Franklin Fueling Systems TS-550 evo 2.3.0.7332 devices, the roleDiag user, which can be obtained by exploiting CVE-2013-7247, has the ability to upload files to the server hosting the web service. As no sanitization checks are in place, an attacker can upload a malicious payload.