Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: Auto-Maskin Component: Marine Pro Observer Clear all filters
TI-2019-04614 CVE-2019-6560 · GHSA-wg4g-mgmc-88mm

Weak password recovery in Auto-Maskin RP210E Versions 3.7 and prior DCU210E Versions 3.7…

Priority MEDIUM 41

In Auto-Maskin RP210E Versions 3.7 and prior, DCU210E Versions 3.7 and prior and Marine Observer Pro (Android App), the software contains a mechanism for users to recover or change their passwords without knowing the ori…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01102 Published 2020-03-23 No fix listed CWE-640
TI-2018-03930 CVE-2018-5402 · GHSA-g66x-xcf8-6hg7

Cleartext transmission of sensitive information in Auto-Maskin DCU-210E

Priority MEDIUM 41

The Auto-Maskin DCU 210E, RP-210E, and Marine Pro Observer Android App use an embedded webserver that uses unencrypted plaintext for the transmission of the administrator PIN Impact: An attacker once authenticated can ch…

CVSS 3.0CRITICAL 9.1 Network No auth No interaction EPSS 0.00883 Published 2018-10-08 Fixed in 3.7 CWE-319
TI-2018-03929 CVE-2018-5401 · GHSA-6w6w-jx93-4cwq

Cleartext transmission of sensitive information in Auto-Maskin DCU-210E

Priority MEDIUM 41

The Auto-Maskin DCU 210E, RP-210E, and Marine Pro Observer Android App transmit sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.

CVSS 3.0CRITICAL 9.1 Network No auth No interaction EPSS 0.00868 Published 2018-10-08 Fixed in 3.7 CWE-319