ICSA-26-239-02

icsaUScisa_csaf_ot

All-Line Equipment Company Fuel-Boss

view advisory published 2026-08-27

Successful exploitation of these vulnerabilities could allow attackers to execute arbitrary commands or code remotely on affected systems.

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2019-11043UScritical9.8OT criticalKEV
In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it is possible to cause FPM module to write past allocated buff…
CVE-2018-19518UShigh7.5Exploit
University of Washington IMAP Toolkit 2007f on UNIX, as used in imap_open() in PHP and other products, launches an rsh command (by means of the imap_rimap function in c-client/imap…
02

references

External citations — patches, advisories, analysis.

03

remediations (16)

  • MitigationFuel-Boss V1 Backflush Systems

    All-Line Equipment Company recommends either taking products that are not fixed off the Internet or restricting the IP addresses that can access them at the router level.

  • MitigationFuel-Boss V1 Backflush Systems

    All-Line Equipment Company recommends either taking products that are not fixed off the Internet or restricting the IP addresses that can access them at the router level.

  • MitigationFuel-Boss V1 Master/Slave

    All-Line Equipment Company recommends either taking products that are not fixed off the Internet or restricting the IP addresses that can access them at the router level.

  • MitigationFuel-Boss V1 Master/Slave

    All-Line Equipment Company recommends either taking products that are not fixed off the Internet or restricting the IP addresses that can access them at the router level.

  • MitigationFuel-Boss V1 Portal

    All-Line Equipment Company recommends either taking products that are not fixed off the Internet or restricting the IP addresses that can access them at the router level.

  • MitigationFuel-Boss V1 Portal

    All-Line Equipment Company recommends either taking products that are not fixed off the Internet or restricting the IP addresses that can access them at the router level.

  • MitigationFuel-Boss V1 Standard

    All-Line Equipment Company recommends either taking products that are not fixed off the Internet or restricting the IP addresses that can access them at the router level.

  • MitigationFuel-Boss V1 Standard

    All-Line Equipment Company recommends either taking products that are not fixed off the Internet or restricting the IP addresses that can access them at the router level.

  • FixedFuel-Boss V1 Backflush Systems

    No fix is planned for Fuel-Boss V1 Backflush Systems.

  • FixedFuel-Boss V1 Backflush Systems

    No fix is planned for Fuel-Boss V1 Backflush Systems.

  • FixedFuel-Boss V1 Master/Slave

    Fixes are not yet available for the Fuel-Boss V1 Master/Slave.

  • FixedFuel-Boss V1 Master/Slave

    Fixes are not yet available for the Fuel-Boss V1 Master/Slave.

  • FixedFuel-Boss V1 Portal

    Fixes are available for the Fuel-Boss V1 Standard and Fuel-Boss V1 Portal. Please contact All-Line Equipment Company (866-356-3336) for instructions on how to receive these fixes.

  • FixedFuel-Boss V1 Portal

    Fixes are available for the Fuel-Boss V1 Standard and Fuel-Boss V1 Portal. Please contact All-Line Equipment Company (866-356-3336) for instructions on how to receive these fixes.

  • FixedFuel-Boss V1 Standard

    Fixes are available for the Fuel-Boss V1 Standard and Fuel-Boss V1 Portal. Please contact All-Line Equipment Company (866-356-3336) for instructions on how to receive these fixes.

  • FixedFuel-Boss V1 Standard

    Fixes are available for the Fuel-Boss V1 Standard and Fuel-Boss V1 Portal. Please contact All-Line Equipment Company (866-356-3336) for instructions on how to receive these fixes.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan