Franklinfueling Colibri Firmware vulnerabilities

CVE-2021-46417 [HIGH] CWE-22 CVE-2021-46417: Insecure handling of a download function leads to disclosure of internal files due to path traversal Insecure handling of a download function leads to disclosure of internal files due to path traversal with root privileges in Franklin Fueling Systems Colibri Controller Module 1.8.19.8580.

CVE-2022-44039 [CRITICAL] CWE-863 CVE-2022-44039: Franklin Fueling System FFS Colibri 1.9.22.8925 is affected by: File system overwrite. The impact is Franklin Fueling System FFS Colibri 1.9.22.8925 is affected by: File system overwrite. The impact is: File system rewrite (remote). ¶¶ An attacker can overwrite system files like [system.conf] and [passwd], this occurs because the insecure usage of "fopen" system function with the mode "wb" which allows overwriting file if exists. Overwriting file