CVE-2019-20467

CVE-2019-20467 describes a critical vulnerability in Sannce Smart HD Wifi Security Camera EAN 2 950004 595317 devices, where a hidden TELNET interface contains two hardcoded backdoor accounts ("root" and "default") with identical credentials across all devices. This allows unauthenticated attackers to gain root access and execute arbitrary code. With a CVSS score of 9.8 (Critical), this vulnerability is easily exploitable over the network with low attack complexity, leading to complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion, indicating awareness among security researchers.