CVE-2018-17176
A replay issue was discovered on Neato Botvac Connected 2.2.0 devices. Manual control mode requires authentication, but once recorded, the authentication (always transmitted in cleartext) can be replayed to /bin/webserver on port 8081. There are no nonces, and timestamps are not checked at all.
- Score
- CVSS 3.0 7.5 High
- Status
- Modified - cve@mitre.org
- Published
- 2018-09-18
- Last modified
- 2024-09-16
- Weaknesses
- CWE-294
Affected products
- Botvac D4 Connected Firmware (Neatorobotics)
- Botvac D6 Connected Firmware (Neatorobotics)
- Botvac D7 Connected Firmware (Neatorobotics)
References
- https://media.ccc.de/v/2018-124-pinky-brain-are-taking-over-the-world-with-vacuum-cleaners
