PT-2018-13938 · Neato · Neato Botvac Connected

Published 2018-09-18 · Updated 2021-06-17 · CVE-2018-17178

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Neato Botvac Connected version 2.2.0

Description An issue allows the execution of unauthenticated manual drive commands on devices with an active session. Commands such as forward, back, arc-left, arc-right, pivot-left, and pivot-right are executed, despite the web socket replying with an "invalid authorization header" message. These commands are sent to the /bin/webserver endpoint on port 8081. Without an active session, commands are still interpreted but have no effect, except for eco-on and eco-off.

Recommendations For Neato Botvac Connected version 2.2.0, consider restricting access to the /bin/webserver endpoint on port 8081 to prevent unauthorized command execution. As a temporary workaround, restrict the use of manual drive commands until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2018-17178

Affected Products

Neato Botvac Connected

References · 3

• 🔥 https://media.ccc.de/v/2018-124-pinky-brain-are-taking-over-the-world-with-vacuum-cleaners · Exploit
• https://osv.dev/vulnerability/CVE-2018-17178 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-17178 · Security Note