PT-2019-9809 · Neato · Neato Botvac Connected

Published 2019-04-25 · Updated 2020-01-22 · CVE-2018-19442

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Neato Botvac Connected version 2.2.0

Description A buffer overflow issue exists in the Network::AuthenticationClient::VerifySignature function, allowing a remote attacker to execute arbitrary code with root privileges. This can be achieved by sending a crafted POST request to the "/vendors/neato/robots/[robot serial]/messages" API endpoint on the nucleo.neatocloud.com web site, specifically on port 4443.

Recommendations For Neato Botvac Connected version 2.2.0, consider restricting access to the "/vendors/neato/robots/[robot serial]/messages" API endpoint until a patch is available. As a temporary workaround, avoid using the VerifySignature function in the Network::AuthenticationClient module to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2018-19442

Affected Products

Neato Botvac Connected

References · 4

• 🔥 https://media.ccc.de/v/eh19-157-smart-vacuum-cleaners-as-remote-wiretapping-devices#t=1779 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-19442 · Security Note
• https://osv.dev/vulnerability/CVE-2018-19442 · Vendor Advisory
• https://usenix.org/system/files/woot19-paper_ullrich.pdf · Note