Files
CVEs-PoC/2019/CVE-2019-13402.md
2025-09-29 21:09:30 +02:00

740 B

CVE-2019-13402

Description

/usr/sbin/default.sh and /usr/apache/htdocs/cgi-bin/admin/hardfactorydefault.cgi on Dynacolor FCM-MB40 v1.2.0.0 devices implement an incomplete factory-reset process. A backdoor can persist because neither system accounts nor the set of services is reset.

POC

Reference

Github

No PoCs found on GitHub currently.