PT-2018-13938 · Neato · Neato Botvac Connected

Publicado 2018-09-18 · Atualizado 2021-06-17 · CVE-2018-17178

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Neato Botvac Connected version 2.2.0

Description An issue allows the execution of unauthenticated manual drive commands on devices with an active session. Commands such as forward, back, arc-left, arc-right, pivot-left, and pivot-right are executed, despite the web socket replying with an "invalid authorization header" message. These commands are sent to the /bin/webserver endpoint on port 8081. Without an active session, commands are still interpreted but have no effect, except for eco-on and eco-off.

Recommendations For Neato Botvac Connected version 2.2.0, consider restricting access to the /bin/webserver endpoint on port 8081 to prevent unauthorized command execution. As a temporary workaround, restrict the use of manual drive commands until a patch is available.

Exploit

Correção

Identificadores relacionados

CVE-2018-17178

Produtos afetados

Neato Botvac Connected

Referências · 3

• 🔥 https://media.ccc.de/v/2018-124-pinky-brain-are-taking-over-the-world-with-vacuum-cleaners · Exploit
• https://osv.dev/vulnerability/CVE-2018-17178 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-17178 · Nota de Segurança