critical9.1
CVE-2018-5402
The Auto-Maskin DCU 210E, RP-210E, and Marine Pro Observer Android App use an embedded webserver that uses unencrypted plaintext for the transmission of the ad…
Impact
The Auto-Maskin DCU 210E, RP-210E, and Marine Pro Observer Android App use an embedded webserver that uses unencrypted plaintext for the transmission of the administrator PIN Impact: An attacker once authenticated can change configurations, upload new configuration files, and upload executable code via file upload for firmware updates. Requires access to the network. Affected releases are Auto-Maskin DCU-210E, RP-210E, and the Marine Pro Observer Android App. Versions prior to 3.7 on ARMv7.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Auto-Maskin | Rp 210e Firmware | All versions |
| Auto-Maskin | Dcu 210e Firmware | All versions |
| Auto-Maskin | Marine Pro Observer | All versions |