CVE-2013-7248

Franklin Fueling Systems TS-550 evo <2.4.0 - Privilege Escalation

Title source: llm

Description

Franklin Fueling Systems TS-550 evo with firmware 2.0.0.6833 and other versions before 2.4.0 has a hardcoded password for the roleDiag account, which allows remote attackers to gain root privileges, as demonstrated using a cmdWebCheckRole action in a TSA_REQUEST.

Exploits (1)

exploitdb WRITEUP VERIFIED

by Trustwave's SpiderLabs · textwebappshardware

https://www.exploit-db.com/exploits/31180

View Code ZIP pw:eip

References (1)

Core 1

Core References

Exploit x_refsource_misc

https://www.trustwave.com/spiderlabs/advisories/TWSL2014-001.txt

Scores

EPSS 0.1540

EPSS Percentile 94.7%

Details

CWE

CWE-255

Status published

Products (3)

franklinfueling/ts-550_evo

franklinfueling/ts-550_evo_firmware 2.0.0.6833

franklinfueling/ts-550_evo_firmware 2.3.1.7492

Published Jan 26, 2014

Tracked Since Feb 18, 2026