system
Describe <CVE-2019-13406>.
user
What is <CVE-2019-13406>?
assistant
A broken access control vulnerability found in Advan VD-1 firmware versions up to 230. An attacker can send a POST request to cgibin/ApkUpload.cgi to install arbitrary APK without any authentication..