{"vulnerability": "CVE-2020-2900", "sightings": [{"uuid": "5b67a7db-4a86-460f-b283-f76cb32a0b2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-29000", "type": "seen", "source": "https://t.me/cibsecurity/22642", "content": "\u203c CVE-2020-29000 \u203c\n\nAn issue was discovered on Geeni GNC-CW013 doorbell 1.8.1 devices. A vulnerability exists in the RTSP service that allows a remote attacker to take full control of the device with a high-privileged account. By sending a crafted message, an attacker is able to remotely deliver a telnet session. Any attacker that has the ability to control DNS can exploit this vulnerability to remotely login to the device and gain access to the camera system.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-01-26T20:46:39.000000Z"}, {"uuid": "3008f17d-ae87-4231-b90e-a12e2121665e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-29006", "type": "seen", "source": "https://t.me/cibsecurity/16777", "content": "\u203c CVE-2020-29006 \u203c\n\nMISP before 2.4.135 lacks an ACL check, related to app/Controller/GalaxyElementsController.php and app/Model/GalaxyElement.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-24T18:46:49.000000Z"}]}