CVE-2023-48929

CRITICAL

Franklin Fueling Systems SSA <1.6.24.492 - Privilege Escalation

Title source: llm
STIX 2.1

Description

Franklin Fueling Systems System Sentinel AnyWare (SSA) version 1.6.24.492 is vulnerable to Session Fixation. The 'sid' parameter in the group_status.asp resource allows an attacker to escalate privileges and obtain sensitive information.

References (1)

Scores

CVSS v3 9.8
EPSS 0.0007
EPSS Percentile 21.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-384
Status published
Products (1)
franklin-electric/system_sentinel_anyware 1.6.24.492
Published Dec 08, 2023
Tracked Since Feb 18, 2026