9
CVE-2020-29000
- EPSS 2.53%
- Veröffentlicht 26.01.2021 18:15:51
- Zuletzt bearbeitet 21.11.2024 05:23:27
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginAn issue was discovered on Geeni GNC-CW013 doorbell 1.8.1 devices. A vulnerability exists in the RTSP service that allows a remote attacker to take full control of the device with a high-privileged account. By sending a crafted message, an attacker is able to remotely deliver a telnet session. Any attacker that has the ability to control DNS can exploit this vulnerability to remotely login to the device and gain access to the camera system.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mygeeni ≫ Gnc-cw013 Firmware Version1.8.1
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 2.53% | 0.828 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.2 | 1.2 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
|
| nvd@nist.gov | 9 | 8 | 10 |
AV:N/AC:L/Au:S/C:C/I:C/A:C
|
https://support.mygeeni.com/hc/en-us
https://gist.github.com/tj-oconnor/d081f5f116a4865f888be81e2466d831