GCVE - cpe:2.3:o:mygeeni:gnc-cw013_firmware:1.8.1:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:mygeeni:gnc-cw013_firmware:1.8.1:*:*:*:*:*:*:*

part: o version: 1.8.1 update: *

Vendor	Mygeeni (`af478bc0-9c19-5732-b5e5-931e6c967a1a`)
Product	Gnc Cw013 Firmware (`24bc1931-f821-513f-93ff-fda86fca5bce`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2020-29000`	vulnerable	2026-06-08 05:23:56.723504	Details available An issue was discovered on Geeni GNC-CW013 doorbell 1.8.1 devices. A vulnerability exists in the RTSP service that allows a remote attacker to take full control of the device with a high-privileged account. By sending a crafted message, an attacker is able to remotely deliver a telnet session. Any attacker that has the ability to control DNS can exploit this vulnerability to remotely login to the device and gain access to the camera system. Published: 2021-01-26T01:24:59.000Z Updated: 2024-08-04T16:48:01.545Z Open on db.gcve.eu Reference links https://support.mygeeni.com/hc/en-us https://gist.github.com/tj-oconnor/d081f5f116a4865f888be81e2466d831	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-28999`	vulnerable	2026-06-08 05:23:56.722880	Details available An issue was discovered in Apexis Streaming Video Web Application on Geeni GNC-CW013 doorbell 1.8.1 devices. A remote attacker can take full control of the camera with a high-privileged account. The vulnerability exists because a static username and password are compiled into a shared library (libhipcam.so) used to provide the streaming camera service. Published: 2021-01-26T01:23:41.000Z Updated: 2024-08-04T16:48:01.307Z Open on db.gcve.eu Reference links https://support.mygeeni.com/hc/en-us https://gist.github.com/tj-oconnor/74f9ebbad668f3a7ce31a968452190d7	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-28998`	vulnerable	2026-06-08 05:23:56.721696	Details available An issue was discovered on Geeni GNC-CW013 doorbell 1.8.1 devices. A vulnerability exists in the Telnet service that allows a remote attacker to take full control of the device with a high-privileged account. The vulnerability exists because a system account has a default and static password. Published: 2021-01-26T01:22:15.000Z Updated: 2024-08-04T16:48:01.251Z Open on db.gcve.eu Reference links https://support.mygeeni.com/hc/en-us https://gist.github.com/tj-oconnor/e21adcf9c0539a12ad2841102928cbd5	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.