CVE-2023-5846 Use of Password Hash With Insufficient Computational Effort in Franklin Fueling System TS-550
Attackers can decode weakly hashed admin credentials to gain unauthenticated access to Franklin Fueling System TS-550 devices.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-5846?
CVE-2023-5846 is a high-severity vulnerability in Franklin Fueling System TS-550, published on 2 Nov 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Franklin Fueling System TS-550 versions prior to 1.9.23.8960 are vulnerable to attackers decoding admin credentials, resulting in unauthenticated access to the device.
Weakness: CWE-916
Which versions are affected by CVE-2023-5846?
It affects 1 product.
Products include Franklinfueling Ts-550 Evo Firmware.
How do I fix CVE-2023-5846?
No fix has been published for CVE-2023-5846 yet. Limit exposure of the affected software until one is available.
Is CVE-2023-5846 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2023-5846 exists.
Other vulnerabilities in Franklin Fueling System TS-550
Sources
Also known as GHSA-85rp-m9xf-h964.