CVE-2020-29000

Katalog CVE

CVSS 7.2 · High EPSS 2,5%

Kerentanan pada mygeeni gnc-cw013 firmware. Skor CVSS 3.1 7.2 (High) menurut NVD.

Deskripsi (NVD)

An issue was discovered on Geeni GNC-CW013 doorbell 1.8.1 devices. A vulnerability exists in the RTSP service that allows a remote attacker to take full control of the device with a high-privileged account. By sending a crafted message, an attacker is able to remotely deliver a telnet session. Any attacker that has the ability to control DNS can exploit this vulnerability to remotely login to the device and gain access to the camera system.

Rincian

Terbit di NVD

26 Januari 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.2 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

EPSS (30 hari)

2,5% peluang dieksploitasi; lebih tinggi dari 84,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://gist.github.com/tj-oconnor/d081f5f116a4865f888be81e2466d831 advisory pihak ketiga
• https://support.mygeeni.com/hc/en-us product