TI-2018-03927 Aliases CVE-2018-5399 GHSA-qxxm-7g2q-pwxw

Hard-coded credentials in Auto-Maskin DCU-210E

MEDIUM 46CWE-798Published 2018-10-08 · Updated 2024-09-17

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: Security bypass
Confidentiality · integrity · availability: High · High · High
Fix status: Fixed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-798.

Summary

The Auto-Maskin DCU 210E firmware contains an undocumented Dropbear SSH server, v2015.55, configured to listen on Port 22 while the DCU is running. The Dropbear server is configured with a hard-coded user name and password combination of root / amroot. The server is configured to use password only authentication not cryptographic keys, however the firmware image contains an RSA host-key for the server. An attacker can exploit this vulnerability to gain root access to the Angstrom Linux operating system and modify any binaries or configuration files in the firmware. Affected releases are Auto-Maskin DCU-210E RP-210E: Versions prior to 3.7 on ARMv7.

Why it matters now

EPSS 0.02095 81st percentileScored 2026-11-07

Fix Fixed DCU-210E (Auto-Maskin): 3.7RP-210E (Auto-Maskin): 3.7

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Auto-Maskin	DCU-210E	3.7 to before 3.7	3.7	Patch available	CNA
Auto-Maskin	RP-210E	3.7 to before 3.7	3.7	Patch available	CNA

DCU-210E VendorAuto-Maskin Affected 3.7 to before 3.7 Fixed in 3.7 Patch available CNA
RP-210E VendorAuto-Maskin Affected 3.7 to before 3.7 Fixed in 3.7 Patch available CNA

CPE configurations NVD · 4

CPE	Versions	Role	Vendor
cpe:2.3:o:auto-maskin:dcu-210e_firmware::::::::	before 3.7	Vulnerable	Auto-Maskin
cpe:2.3:h:auto-maskin:dcu-210e:-:::::::*	not specified by NVD	Running on	Auto-Maskin
cpe:2.3:o:auto-maskin:rp-210e_firmware::::::::	before 3.7	Vulnerable	Auto-Maskin
cpe:2.3:h:auto-maskin:rp-210e:-:::::::*	not specified by NVD	Running on	Auto-Maskin

cpe:2.3:o:auto-maskin:dcu-210e_firmware:*:*:*:*:*:*:*:* Versions before 3.7 Vulnerable ·Auto-Maskin
cpe:2.3:h:auto-maskin:dcu-210e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Auto-Maskin
cpe:2.3:o:auto-maskin:rp-210e_firmware:*:*:*:*:*:*:*:* Versions before 3.7 Vulnerable ·Auto-Maskin
cpe:2.3:h:auto-maskin:rp-210e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Auto-Maskin

Remediation

Fix · CNA DCU-210E (Auto-Maskin) Fixed in 3.7
Fix · CNA RP-210E (Auto-Maskin) Fixed in 3.7

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

Release · 2018-10-08
Auto-Maskin DCU-210E, RP-210E 3.7
4 records Highest priority Priority MEDIUM 4 MEDIUM
Other records, highest priority first
- TI-2018-03930 Cleartext transmission of sensitive information in Auto-Maskin DCU-210EPriority MEDIUM 41
- TI-2018-03929 Cleartext transmission of sensitive information in Auto-Maskin DCU-210EPriority MEDIUM 41
- TI-2018-03928 Origin validation error in Auto-Maskin DCU-210EPriority MEDIUM 41
Show all 4 records →

Timeline

2026-10-02 Threatist record created from CVE-2018-5399
2026-10-03 Alias added: GHSA-qxxm-7g2q-pwxw

References

Advisory 1

VU#176301

Other 1

https://www.us-cert.gov/ics/advisories/icsa-20-051-04

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences