Neatorobotics Botvac D4 Connected Firmware
4 CVEs affecting Neatorobotics Botvac D4 Connected Firmware. Latest disclosed: 2019-02-23. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-17176 | High | 7.5 | 2018-09-18 | A replay issue was discovered on Neato Botvac Connected 2.2.0 devices. Manual control mode requires authentication, but once recorded, the authentication (alwa… |
CVE-2018-20785 | High | 7.4 | 2019-02-23 | Secure boot bypass and memory extraction can be achieved on Neato Botvac Connected 2.2.0 devices. During startup, the AM335x secure boot feature decrypts and e… |
CVE-2018-17178 | Medium | 5.3 | 2018-09-18 | An issue was discovered on Neato Botvac Connected 2.2.0 devices. They execute unauthenticated manual drive commands (sent to /bin/webserver on port 8081) if th… |
CVE-2018-17177 | Low | 2.4 | 2018-09-18 | An issue was discovered on Neato Botvac Connected 2.2.0 and Botvac 85 1.2.1 devices. Static encryption is used for the copying of so-called "black box" logs (e… |