Neatorobotics Botvac Connected Firmware
4 CVEs affecting Neatorobotics Botvac Connected Firmware. Latest disclosed: 2020-01-27. Critical: 1, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-19442 | Critical | 9.8 | 2019-04-25 | A Buffer Overflow in Network::AuthenticationClient::VerifySignature in /bin/astro in Neato Botvac Connected 2.2.0 allows a remote attacker to execute arbitrary… |
CVE-2018-18638 | High | 8.1 | 2018-10-24 | A command injection vulnerability in the setup API in the Neato Botvac Connected 2.2.0 allows network attackers to execute arbitrary commands via shell metacha… |
CVE-2018-20785 | High | 7.4 | 2019-02-23 | Secure boot bypass and memory extraction can be achieved on Neato Botvac Connected 2.2.0 devices. During startup, the AM335x secure boot feature decrypts and e… |
CVE-2018-19441 | Medium | 4.7 | 2020-01-27 | An issue was discovered in Neato Botvac Connected 2.2.0. The GenerateRobotPassword function of the NeatoCrypto library generates insufficiently random numbers… |