PT-2021-9471 · Depstech · Depstech Wifi Digital Microscope 3

Published 2021-07-15 · Updated 2021-08-10 · CVE-2020-12733

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions DEPSTECH WiFi Digital Microscope 3 (affected versions not specified)

Description The issue allows a TELNET connection with the molinkadmin password for the molink account. This is related to Certain Shenzhen PENGLIXIN components used by Shekar Endoscope.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2020-12733

Affected Products

Depstech Wifi Digital Microscope 3

References · 4

• 🔥 https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Depstech%20Microscope%20Smart%20Kid%20Toy.pdf · Exploit
• https://depstech.com/mw001-s02-wifi-usb-digital-microscope · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-12733 · Security Note
• https://t.me/cvenotify/18987 · Telegram Post