Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
10.0

Franklin TS-550 evo firmware allows remote attackers root access

CVE-2013-7248 · published 12 years ago
Summary

Versions of the Franklin TS-550 evo fuel station firmware before 2.4.0 contain a fixed password for the diagnostic account. An attacker who can reach the device over the network can use that password to take full control of the system. Update to firmware version 2.4.0 or later, or apply the vendor's recommended mitigation, to remove the hard‑coded credential.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
franklinfueling ts-550_evo_firmware 2.0.0.6833
2.3.1.7492
cpe:2.3:o:franklinfueling:ts-550_evo_firmware:2.0.0.6833:*:*:*:*:*:*:*
franklinfueling ts-550_evo All versions
cpe:2.3:h:franklinfueling:ts-550_evo:-:*:*:*:*:*:*:*
Original advisory text
Franklin Fueling Systems TS-550 evo with firmware 2.0.0.6833 and other versions before 2.4.0 has a hardcoded password for the roleDiag account, which allows remote attackers to gain root privileges...
Franklin Fueling Systems TS-550 evo with firmware 2.0.0.6833 and other versions before 2.4.0 has a hardcoded password for the roleDiag account, which allows remote attackers to gain root privileges, as demonstrated using a cmdWebCheckRole action in a TSA_REQUEST.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker full control (estimated)
Severity
10.0 Critical
Exploitation
4% chance of attack within 30 days
Type
CWE-255Credentials Management Errors
Timeline
Published26 Jan 2014
Updated23 Oct 2026
First seen29 Sep 2026
Sources
CVE-2013-7248 · NVD
Track software like this
Free during beta