CVE-2020-28998

Name of the Vulnerable Software and Affected Versions: Geeni GNC-CW013 doorbell version 1.8.1

Description: A remote attacker can take full control of the device with a high-privileged account due to a vulnerability in the Telnet service. This issue arises because a system account has a default and static password.

Recommendations: For Geeni GNC-CW013 doorbell version 1.8.1, consider changing the default password of the system account to prevent exploitation. As a temporary workaround, restrict access to the Telnet service until a patch is available.