Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: Auto-Maskin DCU-210E, RP-210E 3.7 Clear all filters
TI-2018-03930 CVE-2018-5402 · GHSA-g66x-xcf8-6hg7

Cleartext transmission of sensitive information in Auto-Maskin DCU-210E

Priority MEDIUM 41

The Auto-Maskin DCU 210E, RP-210E, and Marine Pro Observer Android App use an embedded webserver that uses unencrypted plaintext for the transmission of the administrator PIN Impact: An attacker once authenticated can ch…

CVSS 3.0CRITICAL 9.1 Network No auth No interaction EPSS 0.00883 Published 2018-10-08 Fixed in 3.7 CWE-319
TI-2018-03929 CVE-2018-5401 · GHSA-6w6w-jx93-4cwq

Cleartext transmission of sensitive information in Auto-Maskin DCU-210E

Priority MEDIUM 41

The Auto-Maskin DCU 210E, RP-210E, and Marine Pro Observer Android App transmit sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.

CVSS 3.0CRITICAL 9.1 Network No auth No interaction EPSS 0.00868 Published 2018-10-08 Fixed in 3.7 CWE-319
TI-2018-03928 CVE-2018-5400 · GHSA-hmx9-h7xx-529h

Origin validation error in Auto-Maskin DCU-210E

Priority MEDIUM 41

The Auto-Maskin products utilize an undocumented custom protocol to set up Modbus communications with other devices without validating those devices.

CVSS 3.0CRITICAL 9.1 Network No auth No interaction EPSS 0.00742 Published 2018-10-08 Fixed in 3.7 CWE-346
TI-2018-03927 CVE-2018-5399 · GHSA-qxxm-7g2q-pwxw

Hard-coded credentials in Auto-Maskin DCU-210E

Priority MEDIUM 46

The Auto-Maskin DCU 210E firmware contains an undocumented Dropbear SSH server, v2015.55, configured to listen on Port 22 while the DCU is running.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02095 Published 2018-10-08 Fixed in 3.7 CWE-798