Advisories · Technology
Auto-Maskin DCU-210E.
Every CVE that names Auto-Maskin DCU-210E among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.1 CriticalCritical · CVSS 9+
The Auto-Maskin DCU 210E, RP-210E, and Marine Pro Observer Android App use an embedded webserver that uses unencrypted plaintext for the transmission of the administrator PIN
- Auto-Maskin DCU-210E
- Auto-Maskin RP-210E
- Weak cryptography or TLS
- CVSS 9.1 CriticalCritical · CVSS 9+
The Auto-Maskin DCU 210E, RP-210E, and Marine Pro Observer Android App transmit sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors
- Auto-Maskin DCU-210E
- Auto-Maskin RP-210E
- Weak cryptography or TLS
- CVSS 9.1 CriticalCritical · CVSS 9+
The Auto-Maskin DCU 210E, RP-210E, and Marine Pro Observer Android App utilize an undocumented custom protocol to set up Modbus communications with other devices without validating those devices, res…
- Auto-Maskin DCU-210E
- Auto-Maskin RP-210E
- CWE-346
- CVSS 9.4 CriticalCritical · CVSS 9+
The Auto-Maskin DCU 210E firmware contains an undocumented Dropbear SSH server, v2015.55, configured to listen on Port 22 while the DCU is running and is configured with a hard-coded credentials
- Auto-Maskin DCU-210E
- Auto-Maskin RP-210E
- Hard-coded credentials