PT-2017-9365

Name of the Vulnerable Software and Affected Versions I-O DATA DEVICE TS-WRLP versions 1.00.01 and earlier I-O DATA DEVICE TS-WRLA versions 1.00.01 and earlier Description The issue allows remote attackers to obtain authentication credentials. Recommendations For I-O DATA DEVICE TS-WRLP versions...

PT-2017-9370

Name of the Vulnerable Software and Affected Versions I-O DATA DEVICE TS-WRLP versions 1.01.02 and earlier I-O DATA DEVICE TS-WRLA versions 1.01.02 and earlier Description The issue allows an attacker with administrator rights to execute arbitrary OS commands. Recommendations For I-O DATA DEVICE...

stratesys-ts.com XSS vulnerability

Open Bug Bounty ID: OBB-237553 Description| Value ---|--- Affected Website:| stratesys-ts.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Franklin Fueling Systems TS-550 evo File Upload Vulnerability

The Franklin Fueling Systems TS-550 evo is a fuel management system from Franklin Fueling Systems USA. The system monitors fuel storage and provides an intuitive and easy to recognize interface for alarm functions. A security vulnerability exists in the Franklin Fueling Systems TS-550 evo version...

Franklin Fueling Systems TS-550 evo File Download Vulnerability

The Franklin Fueling Systems TS-550 evo is a fuel management system from Franklin Fueling Systems USA. The system monitors fuel storage and provides an intuitive and easy to recognize interface for alarm functions. A security vulnerability exists in the Franklin Fueling Systems TS-550 evo version...

Cross site request forgery (csrf)

On Franklin Fueling Systems TS-550 evo 2.3.0.7332 devices, the Guest user, which contains the lowest privileges, can post to the idSourceFileName parameter found within the /download directory. This ability allows for an attacker to download sensitive system files from the host machine such as...

CVE-2017-6564

On Franklin Fueling Systems TS-550 evo 2.3.0.7332 devices, the Guest user, which contains the lowest privileges, can post to the idSourceFileName parameter found within the /download directory. This ability allows for an attacker to download sensitive system files from the host machine such as...

Design/Logic Flaw

On Franklin Fueling Systems TS-550 evo 2.3.0.7332 devices, the roleDiag user, which can be obtained by exploiting CVE-2013-7247, has the ability to upload files to the server hosting the web service. As no sanitization checks are in place, an attacker can upload a malicious payload...

CVE-2017-6564

On Franklin Fueling Systems TS-550 evo 2.3.0.7332 devices, the Guest user, which contains the lowest privileges, can post to the idSourceFileName parameter found within the /download directory. This ability allows for an attacker to download sensitive system files from the host machine such as...

CVE-2017-6565

On Franklin Fueling Systems TS-550 evo 2.3.0.7332 devices, the roleDiag user, which can be obtained by exploiting CVE-2013-7247, has the ability to upload files to the server hosting the web service. As no sanitization checks are in place, an attacker can upload a malicious payload...

CVE-2017-6565

On Franklin Fueling Systems TS-550 evo 2.3.0.7332 devices, the roleDiag user, which can be obtained by exploiting CVE-2013-7247, has the ability to upload files to the server hosting the web service. As no sanitization checks are in place, an attacker can upload a malicious payload...

CVE-2017-6564

The CVE-2017-6564 vulnerability affects Franklin Fueling Systems TS-550 evo version 2.3.0.7332. The Guest user (lowest privileges) can post to the idSourceFileName parameter under the /download directory, enabling download of sensitive system files such as databases. This is an information disclo...

CVE-2017-6565

The connected sources confirm a concrete vulnerability in Franklin Fueling Systems TS-550 evo firmware 2.3.0.7332. The issue allows the roleDiag user (credentials obtainable via CVE-2013-7247) to upload files to the server hosting the web service due to lack of input sanitization, enabling a mali...

CVE-2017-6564

On Franklin Fueling Systems TS-550 evo 2.3.0.7332 devices, the Guest user, which contains the lowest privileges, can post to the idSourceFileName parameter found within the /download directory. This ability allows for an attacker to download sensitive system files from the host machine such as...

PT-2017-17162 · Franklin Fueling Systems · Franklin Fueling Systems Ts-550 Evo

Name of the Vulnerable Software and Affected Versions: Franklin Fueling Systems TS-550 evo version 2.3.0.7332 Description: The issue allows an attacker to upload malicious files to the server hosting the web service due to the lack of sanitization checks. This can be achieved by exploiting a...

CVE-2017-6565: Missing Authorization

On Franklin Fueling Systems TS-550 evo 2.3.0.7332 devices, the roleDiag user, which can be obtained by exploiting CVE-2013-7247, has the ability to upload files to the server hosting the web service. As no sanitization checks are in place, an attacker can upload a malicious payload...

EulerOS 2.0 SP2 : gstreamer1-plugins-bad-free (EulerOS-SA-2017-1007)

According to the versions of the gstreamer1-plugins-bad-free package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An integer overflow flaw, leading to a heap-based buffer overflow, was found in GStreamer's VMware VMnc video file format...

PT-2017-17161 · Franklin Fueling Systems · Franklin Fueling Systems Ts-550 Evo

Name of the Vulnerable Software and Affected Versions: Franklin Fueling Systems TS-550 evo version 2.3.0.7332 Description: The issue allows an attacker with the lowest privileges, as the Guest user, to download sensitive system files from the host machine. This is achieved by posting to the...

EulerOS 2.0 SP1 : gstreamer1-plugins-bad-free (EulerOS-SA-2017-1008)

According to the versions of the gstreamer1-plugins-bad-free package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An integer overflow flaw, leading to a heap-based buffer overflow, was found in GStreamer's VMware VMnc video file format...

CVE-2017-6564: Missing Authorization

On Franklin Fueling Systems TS-550 evo 2.3.0.7332 devices, the Guest user, which contains the lowest privileges, can post to the idSourceFileName parameter found within the /download directory. This ability allows for an attacker to download sensitive system files from the host machine such as...