CVE-2018-6827 | BDVDB-2026-96309 Detail

Description#

VOBOT CLOCK before 0.99.30 devices do not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information, and consequently execute arbitrary code, via a crafted certificate, as demonstrated by leveraging a hardcoded --no-check-certificate Wget option.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://stacksmashing.net/CVE-2018-6827.html

Exploit#

No public exploit known

History#

Version 12018-02-09Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.