Dynacolor FCM-MB40 v1.2.0.0 devices allow remote malicious users to execute arbitrary commands via a crafted parameter to a CGI script, as demonstrated by sed injection in cgi-bin/camctrl_save_profile.cgi (save parameter) and cgi-bin/ddns.cgi.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
fortinet fcm-mb40_firmware 1.2.0.0 |