CVE-2019-6560

Severity: critical (CVSS 9.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-03-23 · updated 2026-06-17
Weakness: CWE-640

Description

In Auto-Maskin RP210E Versions 3.7 and prior, DCU210E Versions 3.7 and prior and Marine Observer Pro (Android App), the software contains a mechanism for users to recover or change their passwords without knowing the original password, but the mechanism is weak.

Affected products

Auto-Maskin Dcu 210 Firmware: through 3.7
Auto-Maskin Marine Pro Observer: all versions
Auto-Maskin Rp210E Firmware: through 3.7

References

https://www.us-cert.gov/ics/advisories/icsa-20-051-04
https://www.us-cert.gov/ics/advisories/icsa-20-051-04

Get alerted when CVE-2019-6560 or the next vulnerability affects your stack