Vobot Firmware
Approved changes feed: RSS · Atom
cpe:2.3:o:omninova:vobot_firmware:*:*:*:*:*:*:*:*
part: o version: * update: *
| Vendor | Omninova (7fc1372b-781b-5cd7-bec4-f0ce53e5a31b) |
|---|---|
| Product | Vobot Firmware (47be4420-2e77-5a4a-99ef-c0f6b246e04d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-6827 |
vulnerable | 2026-06-08 05:11:54.214778 |
Details available
VOBOT CLOCK before 0.99.30 devices do not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information, and consequently execute arbitrary code, via a crafted certificate, as demonstrated by leveraging a hardcoded --no-check-certificate Wget option.
Published: 2018-02-09T15:00:00.000Z
Updated: 2024-08-05T06:17:15.858Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-6826 |
vulnerable | 2026-06-08 05:11:54.214423 |
Details available
An issue was discovered on VOBOT CLOCK before 0.99.30 devices. Cleartext HTTP is used to download a breakout program, and therefore man-in-the-middle attackers can execute arbitrary code by watching for a local user to launch the Breakout Easter Egg feature, and then sending a crafted HTTP response.
Published: 2018-02-09T15:00:00.000Z
Updated: 2024-08-05T06:17:15.782Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-6825 |
vulnerable | 2026-06-08 05:11:54.213116 |
Details available
An issue was discovered on VOBOT CLOCK before 0.99.30 devices. An SSH server exists with a hardcoded vobot account that has root access.
Published: 2018-02-09T15:00:00.000Z
Updated: 2024-08-05T06:17:15.786Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.