ICS Advisory: Franklin Fueling System EVO 550/5000

Summary:

The View CSAF document provides an advisory on a critical vulnerability in Franklin Fueling System's EVO 550 and EVO 5000 automatic tank gauges. The vulnerability, CVE-2024-2442, is a Path Traversal vulnerability that allows an attacker to access sensitive files on the system. The vulnerability has a CVSS v4 score of 8.7 and can be exploited remotely with low attack complexity. The affected products are all versions prior to 2.26.3.8963. Franklin Fueling Systems has released updates to fix the vulnerability, and CISA recommends users take defensive measures to minimize the risk of exploitation, including minimizing network exposure, locating control systems behind firewalls, and using secure remote access methods.