CVE-2018-5402: The Auto-Maskin DCU 210E, RP-210E, and Marine Pro Observer Android App use an embedded webserver that uses unencrypted plaintext for the transmission of the administrator PIN
The Auto-Maskin DCU 210E, RP-210E, and Marine Pro Observer Android App use an embedded webserver that uses unencrypted plaintext for the transmission of the administrator PIN Impact: An attacker once authenticated can change configurations, upload new configuration files, and upload executable code via file upload for firmware updates. Requires access to the network. Affected releases are Auto-Maskin DCU-210E, RP-210E, and the Marine Pro Observer Android App. Versions prior to 3.7 on ARMv7.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2018-5402?
CVE-2018-5402 is considered to be of high severity due to the potential for unauthorized access and configuration changes.
How do I fix CVE-2018-5402?
To fix CVE-2018-5402, ensure that secure communication methods are implemented to protect the transmission of the administrator PIN.
What devices are affected by CVE-2018-5402?
CVE-2018-5402 affects the Auto-Maskin DCU 210E, RP-210E, and the Marine Pro Observer Android App.
What type of vulnerability is CVE-2018-5402?
CVE-2018-5402 is a communication vulnerability due to the use of unencrypted plaintext for transmitting sensitive information.
Can CVE-2018-5402 lead to configuration breaches?
Yes, CVE-2018-5402 can allow an authenticated attacker to change configurations and upload new files on the affected devices.