CVE-2018-5401 describes a cleartext transmission vulnerability in Auto-Maskin DCU 210E, RP-210E, and Marine Pro Observer Android App versions prior to 3.7 on ARMv7. These products transmit sensitive process control information via unencrypted Modbus communications, allowing unauthorized actors on the network to sniff and observe critical data. Rated Medium severity (CVSS 5.9), an attacker could gain configuration details and sensor information, aiding in crafting spoofed messages, though high attack complexity is required. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or KEV listing, but the vulnerability has garnered significant community discussion.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:o:auto-maskin:rp_210e_firmware:-:*:*:*:*:*:*:* | ||
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:o:auto-maskin:dcu_210e_firmware:-:*:*:*:*:*:*:* | ||
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:a:auto-maskin:marine_pro_observer:-:*:*:*:*:android:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.