CVE-2020-28998

An issue was discovered on Geeni GNC-CW013 doorbell 1.8.1 devices

published January 26, 2021

CVSS
โ€”
EPSS
3%
Percentile
86.7
In the wild
Unconfirmed
What it is

๐Ÿšจ A default password lets a remote attacker waltz right in and take full control of your Geeni doorbell! ๐Ÿ”‘ Think of this like a hotel room where the key is left at the front desk with no verification โ€” anyone can just walk in and start rearranging your furniture! ๐Ÿจ If exploited, an attacker could manipulate your doorbell settings, view camera feeds, and even disable notifications, making your home security absolutely devastating. It's like giving an intruder the keys to your home without even knowing it!

Put simply

Think of this like a hotel room where the key is left at the front desk with no verification โ€” anyone can just walk in and start rearranging your furniture! ๐Ÿจ The vulnerability arises from the Telnet service on Geeni GNC-CW013 doorbell devices, where a system account has a default and static password, allowing unauthorized access.

What to do

If exploited, an attacker could manipulate your doorbell settings, view camera feeds, and even disable notifications, making your home security absolutely devastating. It's like giving an intruder the keys to your home without even knowing it! Immediately change the default password on your device to a strong, unique one. Consider disabling the Telnet service if it's not required and keep your device firmware updated whenever possible. ๐Ÿ”„ You've got this! Follow these steps, and youโ€™ll be on your way to securing your smart doorbell in no time! ๐Ÿ›ก๏ธ

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02879 ยท 86.7th percentile
Published
2021-01-26T01:22Z
EPSS history
Timeline
  • 26 JAN 01:22Z
    An issue was discovered on Geeni GNC-CW013 doorbell 1.8.1 devices
    cvelistv5