Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2018-5400— The Auto-Maskin DCU 210E, RP-210E, and Marine Pro Observer Android App utilize an undocumented custom protocol to set up Modbus communications with other devices without validating those devices, resulting in an origin validation error

Quick assessment

Affected
Auto-Maskin DCU-210E
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Auto-Maskin DCU-210E和RP-210E都是挪威Auto-Maskin公司的发动机控制面板产品。 Auto-Maskin DCU-210E和RP-210E 3.7之前版本（ARMv7）中存在安全漏洞，该漏洞源于产品在没有验证其他设备的情况下使用未知的定制协议设置与其他设备的Modbus通讯。攻击者可利用该漏洞向任意DCU或RP设备发送任意消息。

AI Predicted 7.5 Difficulty: Easy EPSS 0.74% · P53
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2018-5400

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
The Auto-Maskin DCU 210E, RP-210E, and Marine Pro Observer Android App utilize an undocumented custom protocol to set up Modbus communications with other devices without validating those devices, resulting in an origin validation error
Source: CVE Program / CVE List V5
Vulnerability Description
The Auto-Maskin products utilize an undocumented custom protocol to set up Modbus communications with other devices without validating those devices. The originating device sends a message in plaintext, 48:65:6c:6c:6f:20:57:6f:72:6c:64, "Hello World" over UDP ports 44444-44446 to the broadcast address for the LAN. Without verification devices respond to any of these broadcast messages on the LAN with a plaintext reply over UDP containing the device model and firmware version. Following this exchange the devices allow Modbus transmissions between the two devices on the standard Modbus port 502 TCP. Impact: An attacker can exploit this vulnerability to send arbitrary messages to any DCU or RP device through spoofing or replay attacks as long as they have access to the network. Affected releases are Auto-Maskin DCU-210E RP-210E: Versions prior to 3.7 on ARMv7.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
源验证错误
Source: CVE Program / CVE List V5
Vulnerability Title
Auto-Maskin DCU-210E和RP-210E 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Auto-Maskin DCU-210E和RP-210E都是挪威Auto-Maskin公司的发动机控制面板产品。 Auto-Maskin DCU-210E和RP-210E 3.7之前版本（ARMv7）中存在安全漏洞，该漏洞源于产品在没有验证其他设备的情况下使用未知的定制协议设置与其他设备的Modbus通讯。攻击者可利用该漏洞向任意DCU或RP设备发送任意消息。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Auto-Maskin DCU-210E 3.7 ~ 3.7 -
Auto-Maskin RP-210E 3.7 ~ 3.7 -
Auto-Maskin Marine Pro Observer Android App 0.1 -

II. Public POCs for CVE-2018-5400

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2018-5400

请登录查看更多情报信息。

Vendor Advisories for CVE-2018-5400 (2)

Same Patch Batch · Auto-Maskin · 2018-10-08 · 4 CVEs total

CVE-2018-5399 The Auto-Maskin DCU 210E firmware contains an undocumented Dropbear SSH server, v2015.55,
CVE-2018-5401 The Auto-Maskin DCU 210E, RP-210E, and Marine Pro Observer Android App transmit sensitive
CVE-2018-5402 The Auto-Maskin DCU 210E, RP-210E, and Marine Pro Observer Android App use an embedded web

IV. Related Vulnerabilities

Same product: DCU-210E
Same vendor: Auto-Maskin
Same weakness: CWE-346

V. Comments for CVE-2018-5400

No comments yet

Leave a comment