Sign in Free account Free scan

omninova records

3 published records for vendor omninova.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 2
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

18

Bar: total · dark part: CISA KEV.

Recurring classes

CWE-295 Improper Certificate Validation1
CWE-798 Use of Hard-coded Credentials1

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

3 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
39Monitor	CVE-2018-6825No exploit	An issue was discovered on VOBOT CLOCK before 0.99.30 devices.omninova · vobot firmware · CWE-798 Pre-auth Hard-coded credentials	Critical9.8	—	1.5%	Feb 9, 2018
32Monitor	CVE-2018-6827No exploit	VOBOT CLOCK before 0.99.30 devices do not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servomninova · vobot firmware · CWE-295 pre-auth RCE Weak crypto	High8.1	—	0.9%	Feb 9, 2018
31Monitor	CVE-2018-6826No exploit	An issue was discovered on VOBOT CLOCK before 0.99.30 devices.omninova · vobot firmware pre-auth RCE	High7.5	—	3.0%	Feb 9, 2018

CVE-2018-6825
39Monitor
An issue was discovered on VOBOT CLOCK before 0.99.30 devices.
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Hard-coded credentials
omninova · vobot firmwareFeb 9, 2018
CVE-2018-6827
32Monitor
VOBOT CLOCK before 0.99.30 devices do not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof serv
HighCVSS 8.1No exploitEPSS 0%
- pre-auth RCE
- Weak crypto
omninova · vobot firmwareFeb 9, 2018
CVE-2018-6826
31Monitor
An issue was discovered on VOBOT CLOCK before 0.99.30 devices.
HighCVSS 7.5No exploitEPSS 3%
- pre-auth RCE
omninova · vobot firmwareFeb 9, 2018