CVE-2018-6827

CVE-2018-6827 affects VOBOT CLOCK devices prior to 0.99.30, where the product fails to verify X.509 certificates from SSL servers. This vulnerability enables man-in-the-middle attacks to spoof servers and disclose sensitive data, with potential remote code execution via a crafted certificate, as ...