High severity7.5NVD Advisory· Published Feb 9, 2018· Updated Jun 17, 2026

CVE-2018-6826

Description

An issue was discovered on VOBOT CLOCK before 0.99.30 devices. Cleartext HTTP is used to download a breakout program, and therefore man-in-the-middle attackers can execute arbitrary code by watching for a local user to launch the Breakout Easter Egg feature, and then sending a crafted HTTP response.

Affected products

VOBOT/CLOCKllm-fuzzy
Range: <0.99.30

Patches

Vulnerability mechanics

References

stacksmashing.net/CVE-2018-6826.htmlnvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000