PatchTheCVE: basetechhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2020-27558: Use of an undocumented user in BASETech GE-131 BT-1837836 firmware 20180921 allows remote attackers to view thhttps://patchthecve.com/cve/CVE-2020-27558.htmlhttps://patchthecve.com/cve/CVE-2020-27558.htmlWed, 17 Jun 2026 03:09:18 +0000MEDIUM 6.5: Use of an undocumented user in BASETech GE-131 BT-1837836 firmware 20180921 allows remote attackers to view the video stream.CVE-2020-27557: Unprotected Storage of Credentials vulnerability in BASETech GE-131 BT-1837836 firmware 20180921 allows local https://patchthecve.com/cve/CVE-2020-27557.htmlhttps://patchthecve.com/cve/CVE-2020-27557.htmlWed, 17 Jun 2026 03:09:18 +0000MEDIUM 5.5: Unprotected Storage of Credentials vulnerability in BASETech GE-131 BT-1837836 firmware 20180921 allows local users to gain access to the video streaming username and password via SQLite files containing plain text credentials.CVE-2020-27556: A predictable device ID in BASETech GE-131 BT-1837836 firmware 20180921 allows unauthenticated remote attackerhttps://patchthecve.com/cve/CVE-2020-27556.htmlhttps://patchthecve.com/cve/CVE-2020-27556.htmlWed, 17 Jun 2026 03:09:18 +0000MEDIUM 5.3: A predictable device ID in BASETech GE-131 BT-1837836 firmware 20180921 allows unauthenticated remote attackers to connect to the device.CVE-2020-27555: Use of default credentials for the telnet server in BASETech GE-131 BT-1837836 firmware 20180921 allows remotehttps://patchthecve.com/cve/CVE-2020-27555.htmlhttps://patchthecve.com/cve/CVE-2020-27555.htmlWed, 17 Jun 2026 03:09:18 +0000CRITICAL 9.8: Use of default credentials for the telnet server in BASETech GE-131 BT-1837836 firmware 20180921 allows remote attackers to execute arbitrary system commands as the root user.CVE-2020-27554: Cleartext Transmission of Sensitive Information vulnerability in BASETech GE-131 BT-1837836 firmware 20180921 https://patchthecve.com/cve/CVE-2020-27554.htmlhttps://patchthecve.com/cve/CVE-2020-27554.htmlWed, 17 Jun 2026 03:09:18 +0000HIGH 7.5: Cleartext Transmission of Sensitive Information vulnerability in BASETech GE-131 BT-1837836 firmware 20180921 exists which could leak sensitive information transmitted between the mobile app and the camera device.CVE-2020-27553: In BASETech GE-131 BT-1837836 firmware 20180921, the web-server on the system is configured with the option “Dhttps://patchthecve.com/cve/CVE-2020-27553.htmlhttps://patchthecve.com/cve/CVE-2020-27553.htmlWed, 17 Jun 2026 03:09:17 +0000HIGH 7.5: In BASETech GE-131 BT-1837836 firmware 20180921, the web-server on the system is configured with the option “DocumentRoot /etc“. This allows an attacker with network access to the web-server to download any files from the “/etc” folder without authentication. No path traversal sequences are needed t