CVE-2019-13398

Dynacolor FCM-MB40 v1.2.0.0 devices allow remote attackers to execute arbitrary commands via a crafted parameter to a CGI script, as demonstrated by sed…

published July 8, 2019

CVSS
—
EPSS
4%
Percentile
90.8
In the wild
Unconfirmed
What it is

Dynacolor FCM-MB40 v1.2.0.0 devices allow remote attackers to execute arbitrary commands via a crafted parameter to a CGI script, as demonstrated by sed injection in cgi-bin/camctrl_save_profile.cgi (save parameter) and cgi-bin/ddns.cgi.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04149 · 90.8th percentile
Published
2019-07-08T00:01Z
EPSS history
Timeline
  • 08 JUL 00:01Z
    Dynacolor FCM-MB40 v1.2.0.0 devices allow remote attackers to execute arbitrary commands via a crafted parameter to a CGI script, as demonstrated by sed…
    cvelistv5