CVE-2020-29000 - CVE House
Back to Database
Status published High CVE-2020-29000

An issue was discovered on Geeni GNC-CW013 doorbell 1.8.1 devices....

Vulnerability Description

An issue was discovered on Geeni GNC-CW013 doorbell 1.8.1 devices. A vulnerability exists in the RTSP service that allows a remote attacker to take full control of the device with a high-privileged account. By sending a crafted message, an attacker is able to remotely deliver a telnet session. Any attacker that has the ability to control DNS can exploit this vulnerability to remotely login to the device and gain access to the camera system.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-29000

Credits & Attribution

No credits recorded in the NVD database.

References

More from mygeeni

View All →
CVE-2020-28999
An issue was discovered in Apexis Streaming Video Web Application...
High 7.2
CVE-2020-28998
An issue was discovered on Geeni GNC-CW013 doorbell 1.8.1 devices....
Critical 9.8

Affected Vendor

Affected Software

gnc-cw013 firmware
Vulnerable Versions:
1.8.1

Timeline

Official Publish: January 26th, 2021
Last Modified: August 4th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.