[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f8dmcGA2upidlQ7kNDHHSCfh93V8BMHajEjmF-qWaSv8":3,"g5a-risk:CVE-2018-5399":141},{"success":4,"data":5,"meta":139},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":44,"epssPercentile":15,"epssTimeSeries":45,"severity":46,"affectedProducts":47,"affectedProductsCount":63,"references":64,"referencesCount":75,"weaknesses":76,"weaknessesCount":85,"isActivelyExploited":86,"cisaInfo":15,"otxData":15,"relatedBlogPosts":87,"seoMetadata":88,"configurations":113,"relatedVendorCves":137,"notableEvents":138},"CVE-2018-5399","What is CVE-2018-5399?","The Auto-Maskin DCU 210E firmware contains an undocumented Dropbear SSH server, v2015.55, configured to listen on Port 22 while the DCU is running. The Dropbear server is configured with a hard-coded user name and password combination of root \u002F amroot. The server is configured to use password only authentication not cryptographic keys, however the firmware image contains an RSA host-key for the server. An attacker can exploit this vulnerability to gain root access to the Angstrom Linux operating system and modify any binaries or configuration files in the firmware. Affected releases are Auto-Maskin DCU-210E RP-210E: Versions prior to 3.7 on ARMv7.","The Auto-Maskin DCU 210E firmware contains an undocumented Dropbear SSH server, v2015.55, configured to listen on Port 22 while the DCU is running. The Dropb...","2018-10-08T15:29:02.633","2019-10-09T23:41:17.627",9.8,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":37,"CVSSMetricV40":15},null,[17,30],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",3.9,5.9,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":28,"ImpactScore":36},"cret@cert.org","Secondary",{"Version":21,"VectorString":34,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":23,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":35,"BaseSeverity":27,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:H\u002FA:H",9.4,5.5,[38],{"Source":18,"Type":19,"CVSSData":39,"BaseSeverity":26,"ExploitabilityScore":43,"ImpactScore":43,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":40,"VectorString":41,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":42,"IntegrityImpact":42,"AvailabilityImpact":42,"BaseScore":43,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:C\u002FI:C\u002FA:C","COMPLETE",10,0.02095,[44,44,44,44,44,44,44],"Critical",[48,53,57,60],{"vendor":49,"product":50,"version":51,"criteria":52,"vulnerable":4},"auto-maskin","dcu-210e_firmware","*","cpe:2.3:o:auto-maskin:dcu-210e_firmware:*:*:*:*:*:*:*:*",{"vendor":49,"product":54,"version":55,"criteria":56,"vulnerable":4},"dcu-210e","-","cpe:2.3:h:auto-maskin:dcu-210e:-:*:*:*:*:*:*:*",{"vendor":49,"product":58,"version":51,"criteria":59,"vulnerable":4},"rp-210e_firmware","cpe:2.3:o:auto-maskin:rp-210e_firmware:*:*:*:*:*:*:*:*",{"vendor":49,"product":61,"version":55,"criteria":62,"vulnerable":4},"rp-210e","cpe:2.3:h:auto-maskin:rp-210e:-:*:*:*:*:*:*:*",4,[65,71],{"url":66,"source":67,"tags":68},"https:\u002F\u002Fwww.kb.cert.org\u002Fvuls\u002Fid\u002F176301","Cert",[69,70],"Third Party Advisory","US Government Resource",{"url":72,"source":73,"tags":74},"https:\u002F\u002Fwww.us-cert.gov\u002Fics\u002Fadvisories\u002Ficsa-20-051-04","Us-cert",[],2,[77],{"id":78,"name":79,"description":80,"extendedDescription":81,"status":82,"abstraction":83,"structure":84},"CWE-798","Use of Hard-coded Credentials","The product contains hard-coded credentials, such as a password or cryptographic key.","There are two main variations:","Draft","Base","Simple",1,false,[],{"title":89,"metaDescription":90,"keywords":91,"canonicalUrl":92,"structuredData":93},"What is CVE-2018-5399? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2018-5399, a critical severity cyber security vulnerability from 2018. The Auto-Maskin DCU 210E firmware contains an undocument...","CVE-2018-5399, CVE-2018-5399 vulnerability, CVE-2018-5399 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, auto-maskin security, dcu-210e_firmware vulnerability, dcu-210e vulnerability, rp-210e_firmware vulnerability, rp-210e vulnerability","\u002Fwhat-is\u002Fcve-2018-5399",{"@context":94,"@type":95,"headline":89,"description":90,"datePublished":10,"dateModified":11,"author":96,"publisher":100,"about":104,"mainEntityOfPage":108,"articleSection":111,"keywords":112},"https:\u002F\u002Fschema.org","TechArticle",{"@type":97,"name":98,"url":99},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":97,"name":98,"url":99,"logo":101},{"@type":102,"url":103},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":105,"name":6,"description":106,"additionalType":107},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":109,"@id":110},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2018-5399","Cybersecurity","CVE-2018-5399, CVE-2018-5399 vulnerability, CVE-2018-5399 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[114,127],{"Operator":115,"Negate":15,"Nodes":116},"AND",[117,123],{"Operator":118,"Negate":15,"CPEMatch":119},"OR",[120],{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":121,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":122,"VersionEndIncluding":15},"AABA2941-1749-4916-9BF3-D600192C2871","3.7",{"Operator":118,"Negate":15,"CPEMatch":124},[125],{"Vulnerable":15,"Criteria":56,"MatchCriteriaID":126,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"B7569773-60A5-4E8A-B85D-33AF31052852",{"Operator":115,"Negate":15,"Nodes":128},[129,133],{"Operator":118,"Negate":15,"CPEMatch":130},[131],{"Vulnerable":4,"Criteria":59,"MatchCriteriaID":132,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":122,"VersionEndIncluding":15},"ACBB628A-FCA7-4E7B-AA13-32C2CFA4F5A9",{"Operator":118,"Negate":15,"CPEMatch":134},[135],{"Vulnerable":15,"Criteria":62,"MatchCriteriaID":136,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"B90DF062-A9CB-48BD-ACC7-067271EB160B",[],[],{"lastModified":11,"cacheTime":140,"version":40},1792269629962,{"score":142,"band":143,"action":144,"scoredAt":145},55,"Medium","Plan remediation","2026-10-16T06:44:56.42514+00:00"]