Fortinet FCM-MB40
Approved changes feed: RSS · Atom
cpe:2.3:h:fortinet:fcm-mb40:-:*:*:*:*:*:*:*
part: h version: - update: *
| Vendor | Fortinet (2b06c5e0-0a17-54f4-810a-5ef236d51947) |
|---|---|
| Product | Fcm Mb40 (b550454a-b914-5a46-bae3-900e6d0ec067) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-13402 |
not_vulnerable | 2026-06-08 05:12:42.212043 |
Details available
/usr/sbin/default.sh and /usr/apache/htdocs/cgi-bin/admin/hardfactorydefault.cgi on Dynacolor FCM-MB40 v1.2.0.0 devices implement an incomplete factory-reset process. A backdoor can persist because neither system accounts nor the set of services is reset.
Published: 2019-07-08T00:02:20.000Z
Updated: 2024-08-04T23:49:24.975Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-13401 |
not_vulnerable | 2026-06-08 05:12:42.211734 |
Details available
Dynacolor FCM-MB40 v1.2.0.0 devices have CSRF in all scripts under cgi-bin/.
Published: 2019-07-08T00:02:12.000Z
Updated: 2024-08-04T23:49:25.010Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-13400 |
not_vulnerable | 2026-06-08 05:12:42.211433 |
Details available
Dynacolor FCM-MB40 v1.2.0.0 use /etc/appWeb/appweb.pass to store administrative web-interface credentials in cleartext. These credentials can be retrieved via cgi-bin/getuserinfo.cgi?mode=info.
Published: 2019-07-08T00:02:05.000Z
Updated: 2024-08-04T23:49:24.968Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-13399 |
not_vulnerable | 2026-06-08 05:12:42.211083 |
Details available
Dynacolor FCM-MB40 v1.2.0.0 devices have a hard-coded SSL/TLS key that is used during an administrator's SSL conversation.
Published: 2019-07-08T00:01:53.000Z
Updated: 2024-08-04T23:49:25.012Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-13398 |
not_vulnerable | 2026-06-08 05:12:42.210668 |
Details available
Dynacolor FCM-MB40 v1.2.0.0 devices allow remote attackers to execute arbitrary commands via a crafted parameter to a CGI script, as demonstrated by sed injection in cgi-bin/camctrl_save_profile.cgi (save parameter) and cgi-bin/ddns.cgi.
Published: 2019-07-08T00:01:43.000Z
Updated: 2024-08-04T23:49:25.076Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.