CVEvulnerability

CVE-2018-17178

5.3 MEDIUM Published 2018-09-18 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-09-18
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.3 MEDIUM — CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS 2.0 ([email protected])
2.9 LOW — AV:A/AC:M/Au:N/C:N/I:P/A:N

Description

An issue was discovered on Neato Botvac Connected 2.2.0 devices. They execute unauthenticated manual drive commands (sent to /bin/webserver on port 8081) if they already have an active session. Commands like forward, back, arc-left, arc-right, pivot-left, and pivot-right are executed even though the web socket replies with { "message" : "invalid authorization header" }. Without an active session, commands are still interpreted, but (except for eco-on and eco-off) have no effect, since without active driving, a driving direction does not change anything.

Affected configurations

• neatorobotics botvac d4 connected firmware 2.2.0 • neatorobotics botvac d6 connected firmware 2.2.0 • neatorobotics botvac d5 connected firmware 2.2.0 • neatorobotics botvac d7 connected firmware 2.2.0 • neatorobotics botvac d3 connected firmware 2.2.0

References