2 lines
5.0 KiB
JSON
2 lines
5.0 KiB
JSON
{"affected":[{"affectedData":[{"platforms":["ARMv7"],"product":"DCU-210E","vendor":"Auto-Maskin","versions":[{"lessThan":"3.7","status":"affected","version":"3.7","versionType":"custom"}]},{"platforms":["ARMv7"],"product":"RP-210E","vendor":"Auto-Maskin","versions":[{"lessThan":"3.7","status":"affected","version":"3.7","versionType":"custom"}]}],"source":"cret@cert.org"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:auto-maskin:rp_210e_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"A6276379-86DE-440E-88B1-E2B4AC1A1DD6","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:arm:arm7:*:*:*:*:*:*:*:*","matchCriteriaId":"D64AEAAE-5F7C-43B9-AACA-39C927BDB5B4","versionEndExcluding":"3.7","vulnerable":false},{"criteria":"cpe:2.3:h:auto-maskin:rp_210e:-:*:*:*:*:*:*:*","matchCriteriaId":"2B7F66D3-0436-4BF6-A177-C04C59BFAEE5","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:auto-maskin:dcu_210e_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"4121F18D-C67D-402B-85EB-7768BED46A82","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:arm:arm7:*:*:*:*:*:*:*:*","matchCriteriaId":"D64AEAAE-5F7C-43B9-AACA-39C927BDB5B4","versionEndExcluding":"3.7","vulnerable":false},{"criteria":"cpe:2.3:h:auto-maskin:dcu_210e:-:*:*:*:*:*:*:*","matchCriteriaId":"378677CF-D35D-4122-B481-3B7FCF6F4D27","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:auto-maskin:marine_pro_observer:-:*:*:*:*:android:*:*","matchCriteriaId":"D9050A5F-13F4-44EC-B1C9-8DB90508AA8D","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"The Auto-Maskin DCU 210E, RP-210E, and Marine Pro Observer Android App use an embedded webserver that uses unencrypted plaintext for the transmission of the administrator PIN Impact: An attacker once authenticated can change configurations, upload new configuration files, and upload executable code via file upload for firmware updates. Requires access to the network. Affected releases are Auto-Maskin DCU-210E, RP-210E, and the Marine Pro Observer Android App. Versions prior to 3.7 on ARMv7."},{"lang":"es","value":"Las aplicaciones de Android Auto-Maskin DCU 210E, RP-210E y Marine Pro Observer emplean un servidor web embebido que emplea texto plano para la transmisión del PIN del administrador. Impacto: Una vez autenticado, un atacante puede cambiar las configuraciones, subir nuevos archivos de configuración y subir código ejecutable mediante la subida de archivos para actualizaciones de firmware. Se requiere acceso a la red. Las versiones afectadas son las aplicaciones de Android Auto-Maskin DCU-210E RP-210E y Marine Pro Observer. Versiones anteriores a la 3.7 en ARMv7."}],"id":"CVE-2018-5402","lastModified":"2026-06-17T02:00:15.907","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"MEDIUM","cvssData":{"accessComplexity":"LOW","accessVector":"NETWORK","authentication":"SINGLE","availabilityImpact":"PARTIAL","baseScore":6.5,"confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","version":"2.0"},"exploitabilityScore":8.0,"impactScore":6.4,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV30":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":9.1,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","version":"3.0"},"exploitabilityScore":3.9,"impactScore":5.2,"source":"cret@cert.org","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.0"},"exploitabilityScore":2.8,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2018-10-08T15:29:02.977","references":[{"source":"cret@cert.org","tags":["Third Party Advisory","US Government Resource"],"url":"https://www.kb.cert.org/vuls/id/176301"},{"source":"cret@cert.org","url":"https://www.us-cert.gov/ics/advisories/icsa-20-051-04"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"],"url":"https://www.kb.cert.org/vuls/id/176301"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://www.us-cert.gov/ics/advisories/icsa-20-051-04"}],"sourceIdentifier":"cret@cert.org","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-319"}],"source":"cret@cert.org","type":"Secondary"},{"description":[{"lang":"en","value":"CWE-310"}],"source":"nvd@nist.gov","type":"Primary"}]}
|