CVE-2019-13402: Fortinet Fcm-MB40 Firmware

High severity, CVSS 8.8. EPSS: 1.5% chance of exploitation in the next 30 days.

/usr/sbin/default.sh and /usr/apache/htdocs/cgi-bin/admin/hardfactorydefault.cgi on Dynacolor FCM-MB40 v1.2.0.0 devices implement an incomplete factory-reset process. A backdoor can persist because neither system accounts nor the set of services is reset.

Affected products

• Fortinet Fcm-MB40 Firmware: version 1.2.0.0 only

Published 2019-07-08. Last modified 2026-06-17.