CVE:CVE-2020-29001
CNNVD:CNNVD-202101-2366
Geeni GNC-CW028等都是美国Geeni公司的产品。Geeni GNC-CW028是一款室内网络摄像头。Geeni GNC-CW025是一款室内网络摄像头。Merkury MI-CW024等都是美国Merkury（Merkury）公司的产品。Merkury MI-CW024是一款室内网络摄像头。Merkury MI-CW017是一款室内网络摄像头。
Geeni 多款产品存在安全漏洞，该漏洞源于静态用户名和密码被编译到ppsapp rest应用程序中。攻击者可利用该漏洞使用高特权帐户完全控制摄像头。以下产品及版本受到影响：Geeni GNC-CW028 Camera 2.7.2, Geeni GNC-CW025 Doorbell 2.9.5, Merkury MI-CW024 Doorbell 2.9.6, and Merkury MI-CW017 Camera 2.9.6 devices。
solution:Upgrade merkuryinnovations geeni_gnc-cw028_firmware to a higher version than 2.7.2,and avoid the version 2.7.2; Upgrade merkuryinnovations geeni_gnc-cw025_firmware to a higher version than 2.9.5,and avoid the version 2.9.5; Upgrade merkuryinnovations merkury_mi-cw024_firmware to a higher version than 2.9.6,and avoid the version 2.9.6; Upgrade merkuryinnovations merkury_mi-cw017_firmware to a higher version than 2.9.6,and avoid the version 2.9.6