CVE-2018-5402

The Auto-Maskin DCU 210E, RP-210E, and Marine Pro Observer Android App use an embedded webserver that uses unencrypted plaintext for the transmission of the administrator PIN Impact: An attacker once authenticated can change configurations, upload new configuration files, and upload executable code via file upload for firmware updates. Requires access to the network. Affected releases are Auto-Maskin DCU-210E, RP-210E, and the Marine Pro Observer Android App. Versions prior to 3.7 on ARMv7.

• CWE-319
• CWE-310

• https://www.kb.cert.org/vuls/id/176301Third Party Advisory, US Government Resource
• https://www.us-cert.gov/ics/advisories/icsa-20-051-04
• https://www.kb.cert.org/vuls/id/176301Third Party Advisory, US Government Resource
• https://www.us-cert.gov/ics/advisories/icsa-20-051-04

Published

Oct 8, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-5391The Linux kernel, versions 3.9+, is vulnerable to a denial o…7.5
• CVE-2018-5392mingw-w64 version 5.0.4 by default produces executables that…
• CVE-2018-5393The TP-LINK EAP Controller is TP-LINK's software for remotel…
• CVE-2018-5399The Auto-Maskin DCU 210E firmware contains an undocumented D…9.4
• CVE-2018-5400The Auto-Maskin products utilize an undocumented custom prot…9.1
• CVE-2018-5401The Auto-Maskin DCU 210E, RP-210E, and Marine Pro Observer A…9.1
• CVE-2018-5403Imperva SecureSphere gateway (GW) running v13, for both pre-…
• CVE-2018-5404The Quest Kace K1000 Appliance, versions prior to 9.0.270, a…
• CVE-2018-5405The Quest Kace K1000 Appliance, versions prior to 9.0.270, a…
• CVE-2018-5406The Quest Kace K1000 Appliance, versions prior to 9.0.270, a…8.8
• CVE-2018-5407Simultaneous Multi-threading (SMT) in processors can enable …4.7
• CVE-2018-5408The PrinterLogic Print Management software, versions up to a…