Read the docs

Auto-Maskin

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Auto-Maskin records in CISA KEV

No Auto-Maskin vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

4 records in Marine Pro Observer · all components

Priority MEDIUM 41

In Auto-Maskin RP210E Versions 3.7 and prior, DCU210E Versions 3.7 and prior and Marine Observer Pro (Android App), the software contains a mechanism for users to recover or change their passwords without knowing the ori…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01102 Published 2020-03-23 No fix listed CWE-640
Priority MEDIUM 41

The Auto-Maskin DCU 210E, RP-210E, and Marine Pro Observer Android App use an embedded webserver that uses unencrypted plaintext for the transmission of the administrator PIN Impact: An attacker once authenticated can ch…

CVSS 3.0CRITICAL 9.1 Network No auth No interaction EPSS 0.00883 Published 2018-10-08 Fixed in 3.7 CWE-319
Priority MEDIUM 41

The Auto-Maskin DCU 210E, RP-210E, and Marine Pro Observer Android App transmit sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.

CVSS 3.0CRITICAL 9.1 Network No auth No interaction EPSS 0.00868 Published 2018-10-08 Fixed in 3.7 CWE-319
Open these records in search →