SB2018101905 - Multiple vulnerabilities in Auto-Maskin DCU 210E RP 210E and Marine Pro Observer App

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2018101905

SB2018101905 - Multiple vulnerabilities in Auto-Maskin DCU 210E RP 210E and Marine Pro Observer App

Published: October 19, 2018

Security Bulletin ID SB2018101905
CSH Severity
Low
Patch available
NO
Number of vulnerabilities 4
Exploitation vector Remote access
Highest impact Information disclosure

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 4 vulnerabilities.


1) Use of hardcoded credentials (CVE-ID: CVE–2018-5399)

CWE-ID: CWE-798 - Use of Hard-coded Credentials

CVSSv4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]


The vulnerability allows a remote attacker to obtain potentially sensitive information on the target system.

The weakness exists due to use of an undocumented Dropbear SSH server with a hardcoded username and password. A remote attacker can crack the password.

2) Origin validation error (CVE-ID: CVE–2018-5400)

CWE-ID: CWE-346 - Origin Validation Error

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N]


The vulnerability allows a remote attacker to bypass security restrictions on the target system.

The weakness exists due to origin validation error when the Auto-Maskin products utilize an undocumented custom protocol. A remote attacker can bypass security restrictions to set up Modbus communications with other devices without validating those devices.

3) Cleartext transmission of sensitive information (CVE-ID: CVE–2018-5401)

CWE-ID: CWE-319 - Cleartext Transmission of Sensitive Information

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]


The vulnerability allows a remote attacker to obtain potentially sensitive information on the target system.

The weakness exists due to devices transmit process control information via unencrypted Modbus communications. A remote attacker can gain access to arbitrary data.

4) Cleartext transmission of sensitive information (CVE-ID: CVE–2018-5402)

CWE-ID: CWE-319 - Cleartext Transmission of Sensitive Information

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]


The vulnerability allows a remote attacker to obtain potentially sensitive information on the target system.

The weakness exists due to the embedded webserver uses unencrypted plaintext for the transmission of the administrator PIN. A remote attacker can gain access to arbitrary data.

Remediation

Cybersecurity Help is not aware of any official remediation provided by the vendor.

References