DEPSTECH WiFi Digital Microscope 3 allows remote attackers to change the SSID and password, and demand a ransom payment from the rightful device owner, because there is no way to reset to Factory Default settings.
References
Link | Resource |
---|---|
https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Depstech%20Microscope%20Smart%20Kid%20Toy.pdf | Exploit Third Party Advisory |
https://www.depstech.com/mw001-s02-wifi-usb-digital-microscope | Broken Link Vendor Advisory |
Configurations
Configuration 1 (hide)
AND |
|
Information
Published : 2021-07-15 09:15
Updated : 2022-07-12 10:42
NVD link : CVE-2020-12734
Mitre link : CVE-2020-12734
JSON object : View
CWE
CWE-862
Missing Authorization
Products Affected
depstech
- wifi_digital_microscope_3
- wifi_digital_microscope_3_firmware