CVE-2019-13402

/usr/sbin/default.sh and /usr/apache/htdocs/cgi-bin/admin/hardfactorydefault.cgi on Dynacolor FCM-MB40 v1.2.0.0 devices implement an incomplete factory-reset process. A backdoor can persist because neither system accounts nor the set of services is reset.

Score

CVSS 3.0 8.8 High

Status

Modified - cve@mitre.org

Published

2019-07-08

Last modified

2024-08-04

Weaknesses

CWE-212

Affected products

• Fcm-mb40 Firmware (Fortinet)

References

• https://xor.cat/2019/06/19/fortinet-forticam-vulns/