← CVE Intelligence

CVE-2018-5402

The Auto-Maskin DCU 210E, RP-210E, and Marine Pro Observer Android App use an embedded webserver that uses unencrypted plaintext for the transmission of the administrator PIN PUBLISHED

Description (CNA)

The Auto-Maskin DCU 210E, RP-210E, and Marine Pro Observer Android App use an embedded webserver that uses unencrypted plaintext for the transmission of the administrator PIN Impact: An attacker once authenticated can change configurations, upload new configuration files, and upload executable code via file upload for firmware updates. Requires access to the network. Affected releases are Auto-Maskin DCU-210E, RP-210E, and the Marine Pro Observer Android App. Versions prior to 3.7 on ARMv7.

Affected (CNA)

Vendor / productVersions
Auto-Maskin / DCU-210Eaffected 3.7 before 3.7
Auto-Maskin / RP-210Eaffected 3.7 before 3.7

CWE

CWE-319

References

ADP enrichment

CVE

No English description supplied.