On Franklin Fueling Systems TS-550 evo 2.3.0.7332 devices, the roleDiag user, which can be obtained by exploiting CVE-2013-7247, has the ability to upload files to the server hosting the web service. As no sanitization checks are in place, an attacker can upload a malicious payload.
CPE | Name | Operator | Version |
---|---|---|---|
ts-550_evo_firmware | eq | 2.3.0.7332 |