Vulnerability-Lookup

GHSA-9R7F-GQ6C-HRCV

Vulnerability from github – Published: 2023-11-28 00:30 – Updated: 2024-03-21 03:35

Details

The discontinued FFS Colibri product allows a remote user to access files on the system including files containing login credentials for other users.

Severity ?

6.5 (Medium)


                  
                    CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2023-5885"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-22",
      "CWE-35"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2023-11-27T22:15:08Z",
    "severity": "MODERATE"
  },
  "details": "The discontinued FFS Colibri product allows a remote user to access files on the system including files containing login credentials for other users.\n",
  "id": "GHSA-9r7f-gq6c-hrcv",
  "modified": "2024-03-21T03:35:58Z",
  "published": "2023-11-28T00:30:33Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-5885"
    },
    {
      "type": "WEB",
      "url": "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-331-02"
    },
    {
      "type": "WEB",
      "url": "https://www.franklinfueling.com/en/contact-us"
    },
    {
      "type": "WEB",
      "url": "https://www.franklinfueling.com/en/landing-pages/firmware/colibri-firmware"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
      "type": "CVSS_V3"
    }
  ]
}

CVE-2023-5885 (GCVE-0-2023-5885)

Vulnerability from cvelistv5 – Published: 2023-11-27 21:48 – Updated: 2024-08-02 08:14 Unsupported When Assigned

Title

Franklin Electric Fueling Systems Colibri Path Traversal

Summary

The discontinued FFS Colibri product allows a remote user to access files on the system including files containing login credentials for other users.

Severity ?

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CWE

CWE-35 - Path Traversal

Assigner

icscert

References

URL

Tags

	https://www.cisa.gov/news-events/ics-advisories/I…
	https://www.franklinfueling.com/en/landing-pages/…
	https://www.franklinfueling.com/en/contact-us/

Impacted products

	Vendor	Product	Version
	Franklin Electric Fueling Systems	Colibri	Affected: all versions

Credits

Momen Eldawakhly Samurai Digital Security Ltd. reported this vulnerability to CISA.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T08:14:24.628Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-331-02"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.franklinfueling.com/en/landing-pages/firmware/colibri-firmware/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.franklinfueling.com/en/contact-us/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Colibri",
          "vendor": "Franklin Electric Fueling Systems",
          "versions": [
            {
              "status": "affected",
              "version": "all versions"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "user": "00000000-0000-4000-9000-000000000000",
          "value": "Momen Eldawakhly Samurai Digital Security Ltd. reported this vulnerability to CISA."
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "The discontinued FFS Colibri product allows a remote user to access files on the system including files containing login credentials for other users.\u003cbr\u003e"
            }
          ],
          "value": "The discontinued FFS Colibri product allows a remote user to access files on the system including files containing login credentials for other users.\n"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-35",
              "description": "CWE-35 Path Traversal",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-11-27T21:48:30.996Z",
        "orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
        "shortName": "icscert"
      },
      "references": [
        {
          "url": "https://www.cisa.gov/news-events/ics-advisories/ICSA-23-331-02"
        },
        {
          "url": "https://www.franklinfueling.com/en/landing-pages/firmware/colibri-firmware/"
        },
        {
          "url": "https://www.franklinfueling.com/en/contact-us/"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Franklin Electric Fueling Systems determined that the vulnerability only affects the Colibri product which has not been sold since 2020 and does not affect the current EVO product lines. They created a firmware update for Colibri to address the issue. Users can download the update at from the Franklin Electric website. Franklin Electric is working with distributors to make sure all known users are aware that the update is available for installation.\u003cbr\u003eFor further information, please contact Franklin Electric Fueling Systems.\u003cbr\u003e"
            }
          ],
          "value": "Franklin Electric Fueling Systems determined that the vulnerability only affects the Colibri product which has not been sold since 2020 and does not affect the current EVO product lines. They created a firmware update for Colibri to address the issue. Users can download the update at from the Franklin Electric website. Franklin Electric is working with distributors to make sure all known users are aware that the update is available for installation.\nFor further information, please contact Franklin Electric Fueling Systems.\n"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "tags": [
        "unsupported-when-assigned"
      ],
      "title": "Franklin Electric Fueling Systems Colibri Path Traversal",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
    "assignerShortName": "icscert",
    "cveId": "CVE-2023-5885",
    "datePublished": "2023-11-27T21:48:30.996Z",
    "dateReserved": "2023-10-31T17:12:11.313Z",
    "dateUpdated": "2024-08-02T08:14:24.628Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

GHSA-9R7F-GQ6C-HRCV

CVE-2023-5885 (GCVE-0-2023-5885)

Tags

Sightings

Nomenclature