CVE-2024-2442

highpriority · track · 0EPSS 0.007 · 53 %ileEUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

0.70% (53rd) EPSS

CVSS 7.5 · high

Is it mine?

8 products

Check your exposure

Who says so?

3 sources

cnnvd · enisa_euvd · cisa_csaf_ot

EPSS · scored 2026-10-26

Franklin Fueling System EVO 550 and EVO 5000 are vulnerable to a Path Traversal vulnerability that could allow an attacker to access sensitive files on the system.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

FixedEVO 5000cisa_csaf_ot
EVO 5000: 2.26.3.8963
https://www.franklinfueling.com/en/landing-pages/firmware/evo550-5000-firmware/
FixedEVO 550cisa_csaf_ot
EVO 550: 2.26.3.8963
https://www.franklinfueling.com/en/landing-pages/firmware/evo550-5000-firmware/
MitigationEVO 5000cisa_csaf_ot
Franklin Fueling Systems released the following to fix this vulnerability:
MitigationEVO 550cisa_csaf_ot
Franklin Fueling Systems released the following to fix this vulnerability:

cvss

Technical severity, 0–10. One row per scoring source.

7.5

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 6.9–7.5

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:Nsecondary · CISA US

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:Nsecondary · ENISA EU

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:Nsecondary · ics-cert@hq.dhs.gov USexploitability 3.9 · impact 3.6

v3.16.9mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:Usecondary · CVSS-BT (t0sche)

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: poc · Automatable: yes · Technical Impact: partialcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-25USCWE-25US

affected products (8)

Products and version ranges known to be affected.

Franklin Fueling System EVO 5000: <2.26.3.8963all versionscisa_csaf_otUS
Franklin Fueling System EVO 550: <2.26.3.8963all versionscisa_csaf_otUS
Franklin Fueling System EVO 5000< 2.26.3.8963cisa_csaf_otUS
Franklin Fueling System EVO 550< 2.26.3.8963cisa_csaf_otUS
Franklin Fueling System EVO 5000all versionsenisa_euvdEU
Franklin Fueling System EVO 50000 → 2.26.3.8963enisa_euvdEU
Franklin Fueling System EVO 550all versionsenisa_euvdEU
Franklin Fueling System EVO 5500 → 2.26.3.8963enisa_euvdEU

advisories (1)

Vendor and ecosystem advisories describing this.

ICSA-24-079-01Franklin Fueling System EVO 550/50002024-03-19icsa · cisa_csaf_otUS
Successful exploitation of this vulnerability could allow an attacker to read arbitrary files on the system.

also known as (3)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd cisa_csaf_ot NVD CVE.org MITRE

published 2024-03-19modified 2026-06-17

references (5)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan