RSS   Vulnerabilities for 'Botvac connected firmware'   RSS

2019-04-25
 
CVE-2018-19442

CWE-119
 
 
A Buffer Overflow in Network::AuthenticationClient::VerifySignature in /bin/astro in Neato Botvac Connected 2.2.0 allows a remote attacker to execute arbitrary code with root privileges via a crafted POST request to a vendors/neato/robots/[robot_serial]/messages Neato cloud URI on the nucleo.neatocloud.com web site (port 4443).

 
2019-02-23
 
CVE-2018-20785

CWE-noinfo
 
 
Secure boot bypass and memory extraction can be achieved on Neato Botvac Connected 2.2.0 devices. During startup, the AM335x secure boot feature decrypts and executes firmware. Secure boot can be bypassed by starting with certain commands to the USB serial port. Although a power cycle occurs, this does not completely reset the chip: memory contents are still in place. Also, it restarts into a boot menu that enables XMODEM upload and execution of an unsigned QNX IFS system image, thereby completing the bypass of secure boot. Moreover, the attacker can craft custom IFS data and write it to unused memory to extract all memory contents that had previously been present. This includes the original firmware and sensitive information such as Wi-Fi credentials.

 
2018-10-24
 
CVE-2018-18638

CWE-78
 
 
A command injection vulnerability in the setup API in the Neato Botvac Connected 2.2.0 allows network attackers to execute arbitrary commands via shell metacharacters in the ntp field within JSON data to the /robot/initialize endpoint.

 

 >>> Vendor: Neatorobotics 7 Products
Botvac d3 connected firmware
Botvac d4 connected firmware
Botvac d5 connected firmware
Botvac d6 connected firmware
Botvac d7 connected firmware
Botvac connected firmware
Botvac d3 pro connected firmware

Copyright 2024, cxsecurity.com

 

Back to Top