CVE-2017-6564

On Franklin Fueling Systems TS-550 evo 2.3.0.7332 devices, the Guest user, which contains the lowest privileges, can post to the idSourceFileName parameter found within the /download directory. This ability allows for an attacker to download sensitive system files from the host machine such as databases which contain information that can aid in further attacks.

CVSS v3 6.5 MEDIUM
CVSS v2.0 4.0 MEDIUM

6.5^/10

CVSS v3 : MEDIUM

Vector : AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability : 2.8 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

4.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:S/C:P/I:N/A:N

Exploitability : 8.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://www.u235.io/single-post/2017/05/01/Penetrating-Fuel-Management-Systems	Technical Description Third Party Advisory URL Repurposed
https://gist.github.com/Stick-U235/b187931f828e92866d09b9bdeb956ca2	Third Party Advisory
http://www.u235.io/single-post/2017/05/01/Penetrating-Fuel-Management-Systems	Technical Description Third Party Advisory URL Repurposed
https://gist.github.com/Stick-U235/b187931f828e92866d09b9bdeb956ca2	Third Party Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:franklinfueling:ts-550_evo_firmware:2.3.0.7332:*:*:*:*:*:*:*

cpe:2.3:h:franklinfueling:ts-550_evo:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2017-05-01 19:59

Updated : 2025-04-20 01:37

NVD link : CVE-2017-6564

Mitre link : CVE-2017-6564

CVE.ORG link : CVE-2017-6564

JSON object : View

Products Affected

franklinfueling

ts-550_evo_firmware
ts-550_evo

CWE

CWE-862

Missing Authorization

{"id": "CVE-2017-6564", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N", "authentication": "SINGLE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": true, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 2.8}]}, "published": "2017-05-01T19:59:00.160", "references": [{"url": "http://www.u235.io/single-post/2017/05/01/Penetrating-Fuel-Management-Systems", "tags": ["Technical Description", "Third Party Advisory", "URL Repurposed"], "source": "cve@mitre.org"}, {"url": "https://gist.github.com/Stick-U235/b187931f828e92866d09b9bdeb956ca2", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.u235.io/single-post/2017/05/01/Penetrating-Fuel-Management-Systems", "tags": ["Technical Description", "Third Party Advisory", "URL Repurposed"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://gist.github.com/Stick-U235/b187931f828e92866d09b9bdeb956ca2", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-862"}]}], "descriptions": [{"lang": "en", "value": "On Franklin Fueling Systems TS-550 evo 2.3.0.7332 devices, the Guest user, which contains the lowest privileges, can post to the idSourceFileName parameter found within the /download directory. This ability allows for an attacker to download sensitive system files from the host machine such as databases which contain information that can aid in further attacks."}, {"lang": "es", "value": "En los dispositivos Franklin Fueling Systems TS-550 evo 2.3.0.7332, el usuario invitado, que posee los privilegios m\u00e1s bajos, puede publicar el par\u00e1metro idSourceFileName situado en el directorio /download. Esta capacidad permite a un atacante descargar archivos sensibles del sistema de la m\u00e1quina host, tales como bases de datos, que contienen informaci\u00f3n que podr\u00eda ser de ayuda para nuevos ataques."}], "lastModified": "2025-04-20T01:37:25.860", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:franklinfueling:ts-550_evo_firmware:2.3.0.7332:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B60F50B7-8706-4CB1-A4AA-A08DE9D17742"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:franklinfueling:ts-550_evo:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "42AF9F76-7481-4621-B002-510053E61A7B"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "cve@mitre.org"}