PT-2020-11211 · Auto Maskin · Marine Observer Pro+2

Published 2020-03-23 · Updated 2020-03-27 · CVE-2019-6558

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Auto-Maskin RP210E versions 3.7 and prior DCU210E versions 3.7 and prior Marine Observer Pro (Android App) (affected versions not specified)

Description The software contains a weak mechanism for users to recover or change their passwords without knowing the original password.

Recommendations For Auto-Maskin RP210E versions 3.7 and prior, consider implementing a stronger password recovery mechanism. For DCU210E versions 3.7 and prior, consider implementing a stronger password recovery mechanism. For Marine Observer Pro (Android App), at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-521

Related Identifiers

CVE-2019-6558

Affected Products

Auto-Maskin Rp210E

Dcu210E

Marine Observer Pro

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2019-6558 · Security Note
• https://osv.dev/vulnerability/CVE-2019-6558 · Vendor Advisory
• https://t.me/cvenotify/2045 · Telegram Post
• https://us-cert.gov/ics/advisories/icsa-20-051-04 · Note