Geeni Smarthome GNC-CW013
Approved changes feed: RSS · Atom
cpe:2.3:h:mygeeni:gnc-cw013:-:*:*:*:*:*:*:*
part: h version: - update: *
| Vendor | Mygeeni (af478bc0-9c19-5732-b5e5-931e6c967a1a) |
|---|---|
| Product | Gnc Cw013 (1e0cb4c4-0eb9-58b6-a701-4abe3a7f9d6d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-29000 |
not_vulnerable | 2026-06-08 05:23:56.723527 |
Details available
An issue was discovered on Geeni GNC-CW013 doorbell 1.8.1 devices. A vulnerability exists in the RTSP service that allows a remote attacker to take full control of the device with a high-privileged account. By sending a crafted message, an attacker is able to remotely deliver a telnet session. Any attacker that has the ability to control DNS can exploit this vulnerability to remotely login to the device and gain access to the camera system.
Published: 2021-01-26T01:24:59.000Z
Updated: 2024-08-04T16:48:01.545Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-28999 |
not_vulnerable | 2026-06-08 05:23:56.722990 |
Details available
An issue was discovered in Apexis Streaming Video Web Application on Geeni GNC-CW013 doorbell 1.8.1 devices. A remote attacker can take full control of the camera with a high-privileged account. The vulnerability exists because a static username and password are compiled into a shared library (libhipcam.so) used to provide the streaming camera service.
Published: 2021-01-26T01:23:41.000Z
Updated: 2024-08-04T16:48:01.307Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-28998 |
not_vulnerable | 2026-06-08 05:23:56.722369 |
Details available
An issue was discovered on Geeni GNC-CW013 doorbell 1.8.1 devices. A vulnerability exists in the Telnet service that allows a remote attacker to take full control of the device with a high-privileged account. The vulnerability exists because a system account has a default and static password.
Published: 2021-01-26T01:22:15.000Z
Updated: 2024-08-04T16:48:01.251Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.