CVE-2018-5401

The Auto-Maskin DCU 210E, RP-210E, and Marine Pro Observer Android App transmit sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors

State: Published
Severity: 9.1 Critical
Published: Oct 8, 2018
Updated: Sep 17, 2024
Reserved: Jan 12, 2018

Read the record on cve.org

Description

The Auto-Maskin DCU 210E, RP-210E, and Marine Pro Observer Android App transmit sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors. The devices transmit process control information via unencrypted Modbus communications. Impact: An attacker can exploit this vulnerability to observe information about configurations, settings, what sensors are present and in use, and other information to aid in crafting spoofed messages. Requires access to the network. Affected releases are Auto-Maskin DCU-210E, RP-210E, and Marine Pro Observer Android App. Versions prior to 3.7 on ARMv7.

Scores

CVSS	Score	Vector	Source
3.0	9.1 Critical	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N	certcc

Weaknesses

CWE-319 Cleartext Transmission of Sensitive Information

Affected Products

Product	Versions
DCU-210EAuto-Maskin	3.7 to before 3.7Affected
RP-210EAuto-Maskin	3.7 to before 3.7Affected
Marine Pro Observer Android AppAuto-Maskin	0.1Unknown

References

VU#176301third-party-advisory
https://www.us-cert.gov/ics/advisories/icsa-20-051-04

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.