Omninova Vobot
3 CVEs affecting Omninova Vobot. Latest disclosed: 2018-02-09. Critical: 1, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-6825 | Critical | 9.8 | 2018-02-09 | An issue was discovered on VOBOT CLOCK before 0.99.30 devices. An SSH server exists with a hardcoded vobot account that has root access. |
CVE-2018-6827 | High | 8.1 | 2018-02-09 | VOBOT CLOCK before 0.99.30 devices do not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sens… |
CVE-2018-6826 | High | 7.5 | 2018-02-09 | An issue was discovered on VOBOT CLOCK before 0.99.30 devices. Cleartext HTTP is used to download a breakout program, and therefore man-in-the-middle attackers… |