title: Use of Password Hash With Insufficient Computational Effort in Franklin Fueling System TS-550
description:
Franklin Fueling System TS-550 versions prior to 1.9.23.8960 are vulnerable to attackers decoding admin credentials, resulting in unauthenticated access to the device.
problem types: CWE-916 Use of Password Hash With Insufficient Computational Effort
affected:
{
defaultStatus: unaffected
product: TS-550
vendor: Franklin Fueling System
versions:
lessThan: 1.9.23.8960, status: affected, version: 0, versionType: custom
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 8.3
baseSeverity: HIGH
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: NONE
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L
version: 3.1
]
format: CVSS
scenarios: GENERAL
solutions:
Franklin Fueling Systems released the following to fix this vulnerability:
*  TS-550:  Version 1.9.23.8960 https://fele.widen.net/s/kwswqllpbt/tb0923-04-t5-series-firmware-1-9-23-8960-release-notes
For more information, contact  Franklin Fueling System https://www.franklinfueling.com/en/contact-us/ .