CVE-2020-28999

Published: Jan 26, 2021Modified: Jun 17, 2026

7.2

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.2 / Impact: 5.9

Source: NVD

Description

An issue was discovered in Apexis Streaming Video Web Application on Geeni GNC-CW013 doorbell 1.8.1 devices. A remote attacker can take full control of the camera with a high-privileged account. The vulnerability exists because a static username and password are compiled into a shared library (libhipcam.so) used to provide the streaming camera service.

Affected (1)

Products: Mygeeni: Gnc Cw013 Firmware

1 product

Gnc Cw013 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mygeeni Gnc Cw013 Firmware	Version 1.8.1

Running on/with	Platform Versions
Mygeeni Gnc Cw013	All versions

Related CWEs

Use of Hard-coded Credentials

The product contains hard-coded credentials, such as a password or cryptographic key.

References (4)

https://gist.github.com/tj-oconnor/74f9ebbad668f3a7ce31a968452190d7

Source: cve@mitre.org

Third Party Advisory

https://support.mygeeni.com/hc/en-us

Source: cve@mitre.org

Product

https://gist.github.com/tj-oconnor/74f9ebbad668f3a7ce31a968452190d7

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://support.mygeeni.com/hc/en-us

Source: af854a3a-2127-422b-91ae-364da2661108

Product

Timeline

No history available yet.