Approved changes feed: RSS · Atom

cpe:2.3:h:omninova:vobot:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorOmninova (7fc1372b-781b-5cd7-bec4-f0ce53e5a31b)
ProductVobot (c1872ec4-1d70-523d-ae00-5685e7865247)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-6827 not_vulnerable 2026-06-08 05:11:54.214799 Details available
VOBOT CLOCK before 0.99.30 devices do not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information, and consequently execute arbitrary code, via a crafted certificate, as demonstrated by leveraging a hardcoded --no-check-certificate Wget option.
Published: 2018-02-09T15:00:00.000Z
Updated: 2024-08-05T06:17:15.858Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-6826 not_vulnerable 2026-06-08 05:11:54.214452 Details available
An issue was discovered on VOBOT CLOCK before 0.99.30 devices. Cleartext HTTP is used to download a breakout program, and therefore man-in-the-middle attackers can execute arbitrary code by watching for a local user to launch the Breakout Easter Egg feature, and then sending a crafted HTTP response.
Published: 2018-02-09T15:00:00.000Z
Updated: 2024-08-05T06:17:15.782Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-6825 not_vulnerable 2026-06-08 05:11:54.213897 Details available
An issue was discovered on VOBOT CLOCK before 0.99.30 devices. An SSH server exists with a hardcoded vobot account that has root access.
Published: 2018-02-09T15:00:00.000Z
Updated: 2024-08-05T06:17:15.786Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.