{"uuid": "0d5bc2fc-1211-473e-ac97-6e96145e1b48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2019-13398", "type": "published-proof-of-concept", "source": "https://t.me/cveNotify/293", "content": "\ud83d\udea8 #CVE-2019-13398\nDynacolor FCM-MB40 v1.2.0.0 devices allow remote attackers to execute arbitrary commands via a crafted parameter to a CGI script, as demonstrated by sed injection in cgi-bin/camctrl_save_profile.cgi (save parameter) and cgi-bin/ddn... https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13398\n\n\ud83c\udf96@cveNotify", "creation_timestamp": "2019-07-08T02:59:52.000000Z"}