← Zuruck zu CVEs
CVE-2022-44039
CRITICAL9.8
Beschreibung
Franklin Fueling System FFS Colibri 1.9.22.8925 is affected by: File system overwrite. The impact is: File system rewrite (remote). ¶¶ An attacker can overwrite system files like [system.conf] and [passwd], this occurs because the insecure usage of "fopen" system function with the mode "wb" which allows overwriting file if exists. Overwriting files such as passwd, allows an attacker to escalate his privileges by planting backdoor user with root privilege or change root password.
CVE Details
CVSS v3.1 Bewertung9.8
SchweregradCRITICAL
CVSS VektorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AngriffsvektorNETWORK
KomplexitatLOW
Erforderliche PrivilegienNONE
BenutzerinteraktionNONE
Veroffentlicht12/5/2022
Zuletzt geandert4/24/2025
Quellenvd
Honeypot-Sichtungen0
Betroffene Produkte
franklinfueling:colibri_firmware
Schwachen (CWE)
CWE-863CWE-863
Referenzen
https://pastebin.com/raw/64stbsWu(cve@mitre.org)
https://pastebin.com/raw/64stbsWu(af854a3a-2127-422b-91ae-364da2661108)
IOC Korrelationen
Keine Korrelationen erfasst
This product uses data from the NVD API but is not endorsed or certified by the NVD.