CVE-2019-13352: WolfVision Cynap before 1.30j uses a static, hard-coded cryptographic secret for generating support PINs fo...

Security readout for executives and security teams

WolfVision Cynap devices before version 1.30j used a fixed secret in the password recovery process. If an attacker knows the secret and related calculation method, they may reset the ADMIN password and gain remote access. This is most urgent where Cynap management interfaces are reachable beyond trusted networks. Exposure is likely limited to organizations running WolfVision Cynap devices on firmware before 1.30j, especially if administrative or support interfaces are network-accessible. The provided affected-product metadata is incomplete, so asset inventory is required. Prioritize exposed or business-critical Cynap devices because compromise could hand over administrator control. Treat this as a targeted device-management risk rather than a broad enterprise software emergency. Mitigation focus: Inventory WolfVision Cynap devices and record firmware versions.; Update affected devices to version 1.30j or vendor-approved newer firmware.; Restrict Cynap administrative access to trusted management networks..

Prepared

Jun 6, 2026, 20:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.