CVE-2021-46417: Insecure handling of a download function leads to disclosure of internal files due to path traversal with r...

Security readout for executives and security teams

CVE-2021-46417 is a file disclosure issue in Franklin Fueling Systems Colibri Controller Module 1.8.19.8580. A vulnerable download function can mishandle file paths and expose internal files with elevated privileges. For operators, the main concern is unauthorized access to sensitive controller files, configuration data, or operational information. Exposure is most likely where Colibri Controller Module 1.8.19.8580 management or download functionality is reachable by untrusted users or networks. Internet-exposed, weakly segmented, or shared operational environments have higher concern. The bundle does not identify other affected versions or products. Treat this as a high-priority operational technology exposure if affected controllers are reachable beyond trusted administrators. The issue can disclose sensitive internal files, and public writeups exist. Prioritize inventory, access restriction, vendor guidance review, and credential impact assessment. Mitigation focus: Identify any Colibri Controller Module 1.8.19.8580 deployments.; Check Franklin Fueling Systems guidance for firmware updates or official mitigations.; Restrict controller management access to trusted administrative networks..

Prepared

Jun 2, 2026, 10:26 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.