CVE-2020-12733

Katalog CVE

CVSS 7.5 · High EPSS 1,3%

Kerentanan Incorrect Authorization pada depstech wifi digital microscope 3 firmware. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

Certain Shenzhen PENGLIXIN components on DEPSTECH WiFi Digital Microscope 3, as used by Shekar Endoscope, allow a TELNET connection with the molinkadmin password for the molink account.

Rincian

Terbit di NVD

15 Juli 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-863: Incorrect Authorization

EPSS (30 hari)

1,3% peluang dieksploitasi; lebih tinggi dari 70,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.depstech.com/mw001-s02-wifi-usb-digital-microscope broken link · advisory vendor
• https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Depstech%20Microscope%20Smart%20Kid%20Toy.pdf exploit · advisory pihak ketiga