CVE-2018-5402

CRITICAL

Auto-Maskin DCU/RP-210E/Marine Pro Observer <3.7 - RCE

Title source: llm
STIX 2.1

Description

The Auto-Maskin DCU 210E, RP-210E, and Marine Pro Observer Android App use an embedded webserver that uses unencrypted plaintext for the transmission of the administrator PIN Impact: An attacker once authenticated can change configurations, upload new configuration files, and upload executable code via file upload for firmware updates. Requires access to the network. Affected releases are Auto-Maskin DCU-210E, RP-210E, and the Marine Pro Observer Android App. Versions prior to 3.7 on ARMv7.

References (2)

Core 2
Core References
Third Party Advisory, US Government Resource third-party-advisory x_refsource_cert-vn
https://www.kb.cert.org/vuls/id/176301

Scores

CVSS v3 9.1
EPSS 0.0088
EPSS Percentile 54.4%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Details

CWE
CWE-310 CWE-319
Status published
Products (3)
auto-maskin/dcu_210e_firmware
auto-maskin/marine_pro_observer
auto-maskin/rp_210e_firmware
Published Oct 08, 2018
Tracked Since Feb 18, 2026