critical9.8
CVE-2020-28998
An issue was discovered on Geeni GNC-CW013 doorbell 1.8.1 devices.
Impact
An issue was discovered on Geeni GNC-CW013 doorbell 1.8.1 devices. A vulnerability exists in the Telnet service that allows a remote attacker to take full control of the device with a high-privileged account. The vulnerability exists because a system account has a default and static password.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mygeeni | Gnc-Cw013 Firmware | Version 1.8.1 |