Vulnerabilities > Fortinet > FCM Mb40 > Critical

DATE CVE VULNERABILITY TITLE RISK
2019-07-08 CVE-2019-13398 OS Command Injection vulnerability in Fortinet Fcm-Mb40 Firmware 1.2.0.0
Dynacolor FCM-MB40 v1.2.0.0 devices allow remote attackers to execute arbitrary commands via a crafted parameter to a CGI script, as demonstrated by sed injection in cgi-bin/camctrl_save_profile.cgi (save parameter) and cgi-bin/ddns.cgi.
network
low complexity
fortinet CWE-78
critical
 9.0
9.0