CVE-2024-2442: Path Traversal vulnerability in Franklin Fueling System EVO 550/5000

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-03-19 · updated 2026-06-17
Weakness: CWE-25

Description

Franklin Fueling System EVO 550 and EVO 5000 are vulnerable to a Path Traversal vulnerability that could allow an attacker to access sensitive files on the system.

Affected products

Franklinfueling Evo 5000: before 2.26.3.8963 — fixed in 2.26.3.8963
Franklinfueling Evo 550: before 2.26.3.8963 — fixed in 2.26.3.8963

How to fix

Upgrade to a fixed version: Franklinfueling Evo 5000 2.26.3.8963; Franklinfueling Evo 550 2.26.3.8963. Check the vendor advisory for mitigations.

References

https://www.cisa.gov/news-events/ics-advisories/icsa-24-079-01
https://www.cisa.gov/news-events/ics-advisories/icsa-24-079-01

Get alerted when CVE-2024-2442 or the next vulnerability affects your stack