2014-01-25

2014-01-26

2014-01-27

All (2) Critical (2) High (2) Medium (21) Low (3)

CVE-2013-7248 CRITICAL POC THREAT Emergency

Franklin Fueling Systems TS-550 evo with firmware 2.0.0.6833 and other versions before 2.4.0 has a hardcoded password for the roleDiag account, which allows remote attackers to gain root privileges,. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 15.4%.

Authentication Bypass Ts 550 Evo Firmware Ts 550 Evo

NVD Exploit-DB

CVSS 2.0

10.0

EPSS

15.4%

Threat

4.0

CVE-2013-7137 CRITICAL POC PATCH Act Now

The "remember me" functionality in login.php in Burden before 1.8.1 allows remote attackers to bypass authentication and gain privileges by setting the burden_user_rememberme cookie to 1. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

PHP Authentication Bypass Burden

NVD Exploit-DB GitHub

CVSS 3.1

9.8

EPSS

9.8%