CVE-2019-13402

/usr/sbin/default.sh and /usr/apache/htdocs/cgi-bin/admin/hardfactorydefault.cgi on Dynacolor FCM-MB40 v1.2.0.0 devices implement an incomplete factory-reset process. A backdoor can persist because neither system accounts nor the set of services is reset.

/usr/sbin/default.sh and /usr/apache/htdocs/cgi-bin/admin/hardfactorydefault.cgi on Dynacolor FCM-MB40 v1.2.0.0 devices implement an incomplete factory-reset process. A backdoor can persist because neither system accounts nor the set of services is reset.

Los archivos /usr/sbin/default.sh y /usr/apache/htdocs/cgi-bin/admin/hardfactorydefault.cgi en dispositivos FCM-MB40 versión v1.2.0.0 de Dynacolor, implementan un proceso de restablecimiento de fábrica incompleto. Un puerta trasera (backdoor) puede persistir porque no se restablecen ni las cuentas del sistema ni el conjunto de servicios.