Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
neatorobotics botvac d4 connected firmware 2.2.0 vulnerabilities and exploits
(subscribe to this query)
7.5
CVSSv3
CVE-2018-17176
A replay issue exists on Neato Botvac Connected 2.2.0 devices. Manual control mode requires authentication, but once recorded, the authentication (always transmitted in cleartext) can be replayed to /bin/webserver on port 8081. There are no nonces, and timestamps are not checked ...
Neatorobotics Botvac D4 Connected Firmware 2.2.0
Neatorobotics Botvac D6 Connected Firmware 2.2.0
Neatorobotics Botvac D7 Connected Firmware 2.2.0
7.4
CVSSv3
CVE-2018-20785
Secure boot bypass and memory extraction can be achieved on Neato Botvac Connected 2.2.0 devices. During startup, the AM335x secure boot feature decrypts and executes firmware. Secure boot can be bypassed by starting with certain commands to the USB serial port. Although a power ...
Neatorobotics Botvac D4 Connected Firmware 2.2.0
Neatorobotics Botvac D6 Connected Firmware 2.2.0
Neatorobotics Botvac D5 Connected Firmware 2.2.0
Neatorobotics Botvac D7 Connected Firmware 2.2.0
Neatorobotics Botvac D3 Connected Firmware 2.2.0
Neatorobotics Botvac D3 Pro Connected Firmware 2.2.0
Neatorobotics Botvac Connected Firmware 2.2.0
5.3
CVSSv3
CVE-2018-17178
An issue exists on Neato Botvac Connected 2.2.0 devices. They execute unauthenticated manual drive commands (sent to /bin/webserver on port 8081) if they already have an active session. Commands like forward, back, arc-left, arc-right, pivot-left, and pivot-right are executed eve...
Neatorobotics Botvac D4 Connected Firmware 2.2.0
Neatorobotics Botvac D6 Connected Firmware 2.2.0
Neatorobotics Botvac D5 Connected Firmware 2.2.0
Neatorobotics Botvac D7 Connected Firmware 2.2.0
Neatorobotics Botvac D3 Connected Firmware 2.2.0
2.4
CVSSv3
CVE-2018-17177
An issue exists on Neato Botvac Connected 2.2.0 and Botvac 85 1.2.1 devices. Static encryption is used for the copying of so-called "black box" logs (event logs and core dumps) to a USB stick. These logs are RC4-encrypted with a 9-character password of *^JEd4W!I that is...
Neatorobotics Botvac D4 Connected Firmware 2.2.0
Neatorobotics Botvac D6 Connected Firmware 2.2.0
Neatorobotics Botvac D5 Connected Firmware 2.2.0
Neatorobotics Botvac D7 Connected Firmware 2.2.0
Neatorobotics Botvac D3 Connected Firmware 2.2.0
Neatorobotics Botvac 85 Firmware 1.2.1
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-37316
firmware
CVE-2024-30078
CVE-2024-5995
remote code execution
logic flaw
CVE-2024-20693
CVE-2024-37315
CVE-2024-5464
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started