CVE-2021-46417
CVE-2021-46417
Vexday Risk Score
72High priority
SSVC decision (CISA)
Act
Exploitation + impact → act immediately
Exploit maturity
Functional exploit
Automatable exploit available (Nuclei/Metasploit).
CVSS —EPSS 59.8%KEV nãoPoC públicaNuclei simMetasploit —Patch —
Lifecycle
07 Apr 2022Published on NVD
11 Apr 2022Public PoC
Weaponization speed
4 daysto first PoC
Weaponized quickly — attackers prioritized this vulnerability. Patch urgently.
Recommendation: Patch as soon as possible — active exploitation confirmed.
Insecure handling of a download function leads to disclosure of internal files due to path traversal with root privileges in Franklin Fueling Systems Colibri Controller Module 1.8.19.8580.
Affected products
n/a · n/apublic PoCs found — 5
githubgithub.com/Henry4E36/CVE-2021-46417★ 0cve_referencepacketstormsecurity.com/files/166610/FFS-Colibri-Controller-Module-1.8.19.8580-Directory-Traversal.htmlunverifiedcve_referencepacketstormsecurity.com/files/166671/Franklin-Fueling-Systems-Colibri-Controller-Module-1.8.19.8580-Local-File-Inclusion.htmlunverifiedexploitdbwww.exploit-db.com/exploits/50861unverifiedvulncheckvulncheck.com/xdb/feecadc93874unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
http://packetstormsecurity.com/files/166610/FFS-Colibri-Controller-Module-1.8.19.8580-Directory-Traversal.htmlhttp://packetstormsecurity.com/files/166671/Franklin-Fueling-Systems-Colibri-Controller-Module-1.8.19.8580-Local-File-Inclusion.htmlhttps://drive.google.com/drive/folders/1Yu4aVDdrgvs-F9jP3R8Cw7qo_TC7VB-R