CVE-2019-13398

HIGH · CVSS 7.2 EPSS 4.15%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2019-07-08 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2019-13398

Severity

HIGH

CVSS

7.2

EPSS

4.15%

Original NVD Description

Dynacolor FCM-MB40 v1.2.0.0 devices allow remote attackers to execute arbitrary commands via a crafted parameter to a CGI script, as demonstrated by sed injection in cgi-bin/camctrl_save_profile.cgi (save parameter) and cgi-bin/ddns.cgi.