VULNERABILITY INTELLIGENCE

CVE-2019-13402

CVSS score8.8 HIGH

EPSS probability1.52%

CISA KEVNot currently listed

Published2019-07-08

Last modified2026-06-17

Description

/usr/sbin/default.sh and /usr/apache/htdocs/cgi-bin/admin/hardfactorydefault.cgi on Dynacolor FCM-MB40 v1.2.0.0 devices implement an incomplete factory-reset process. A backdoor can persist because neither system accounts nor the set of services is reset.