PT-2021-11620 · Geeni+1 · Geeni Gnc-Cw025 Doorbell+3

Published 2021-01-26 · Updated 2021-02-03 · CVE-2020-29001

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Geeni GNC-CW028 Camera version 2.7.2 Geeni GNC-CW025 Doorbell version 2.9.5 Merkury MI-CW024 Doorbell version 2.9.6 Merkury MI-CW017 Camera version 2.9.6

Description: A vulnerability exists in the RESTful Services API that allows a remote attacker to take full control of the camera with a high-privileged account. The issue arises because a static username and password are compiled into the ppsapp RESTful application.

Recommendations: For Geeni GNC-CW028 Camera version 2.7.2, consider disabling the RESTful Services API until a patch is available. For Geeni GNC-CW025 Doorbell version 2.9.5, restrict access to the ppsapp RESTful application to minimize the risk of exploitation. For Merkury MI-CW024 Doorbell version 2.9.6, avoid using static username and password in the RESTful Services API. For Merkury MI-CW017 Camera version 2.9.6, temporarily disable the ppsapp RESTful application to prevent remote attackers from taking control of the camera.

Exploit

Fix

Cleartext Storage of Sensitive Information

Weakness Enumeration

CWE-312

Related Identifiers

CVE-2020-29001

Affected Products

Geeni Gnc-Cw025 Doorbell

Geeni Gnc-Cw028 Camera

Merkury Mi-Cw017 Camera

Merkury Mi-Cw024 Doorbell

References · 5

• 🔥 https://gist.github.com/tj-oconnor/371d34342c0cc2be015cc89d6dc2bc66 · Exploit
• https://support.mygeeni.com/hc/en-us · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-29001 · Security Note
• https://osv.dev/vulnerability/CVE-2020-29001 · Vendor Advisory
• https://t.me/cvenotify/9301 · Telegram Post