Neatorobotics

Records7All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Neatorobotics records in CISA KEV

No Neatorobotics vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Botvac Connected Firmware 4 records MEDIUM Botvac D4 Connected Firmware 4 records LOW Botvac D6 Connected Firmware 4 records LOW Botvac D7 Connected Firmware 4 records LOW Botvac D3 Connected Firmware 3 records LOW Botvac D5 Connected Firmware 3 records LOW Botvac 85 Firmware 1 record LOW Botvac D3 Pro Connected Firmware 1 record LOW

Records

7 records

TI-2018-13765 CVE-2018-19442 · GHSA-3c54-vg5v-pqpf

A Buffer Overflow in Network::AuthenticationClient::VerifySignature in /bin/astro in…

MEDIUM 52

A Buffer Overflow in Network::AuthenticationClient::VerifySignature in /bin/astro in Neato Botvac Connected 2.2.0 allows a remote attacker to execute arbitrary code with root privileges via a crafted POST request to a ve…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.07535 Published 2019-04-25 No fix listed CWE-119

TI-2018-13174 CVE-2018-18638 · GHSA-96cj-c95w-hg9m

A command injection vulnerability in the setup API in the Neato Botvac Connected 2.2.0…

MEDIUM 40

A command injection vulnerability in the setup API in the Neato Botvac Connected 2.2.0 allows network attackers to execute arbitrary commands via shell metacharacters in the ntp field within JSON data to the /robot/initi…

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.02832 Published 2018-10-24 No fix listed CWE-78

TI-2018-12276 CVE-2018-17176 · GHSA-rw3p-8pm8-f7wf

A replay issue was discovered on Neato Botvac Connected 2.2.0 devices.

LOW 35

A replay issue was discovered on Neato Botvac Connected 2.2.0 devices.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01 Published 2018-09-18 No fix listed CWE-294

TI-2018-14756 CVE-2018-20785 · GHSA-qj4f-cpwp-4pg8

Secure boot bypass and memory extraction can be achieved on Neato Botvac Connected 2.2.0…

LOW 33

Secure boot bypass and memory extraction can be achieved on Neato Botvac Connected 2.2.0 devices.

CVSS 3.0HIGH 7.4 Local No auth No interaction EPSS 0.0047 Published 2019-02-23 No fix listed

TI-2018-12278 CVE-2018-17178 · GHSA-486g-rgjg-jqcq

An issue was discovered on Neato Botvac Connected 2.2.0 devices.

LOW 25

An issue was discovered on Neato Botvac Connected 2.2.0 devices.

CVSS 3.1MEDIUM 5.3 Adjacent network No auth No interaction EPSS 0.00675 Published 2018-09-18 No fix listed

TI-2018-13764 CVE-2018-19441 · GHSA-4f4h-4mvr-gm9g

An issue was discovered in Neato Botvac Connected 2.2.0.

LOW 21

An issue was discovered in Neato Botvac Connected 2.2.0.

CVSS 3.1MEDIUM 4.7 Local Low privileges No interaction EPSS 0.00296 Published 2020-01-27 No fix listed CWE-330

TI-2018-12277 CVE-2018-17177 · GHSA-m5xh-jxq3-g8gc

An issue was discovered on Neato Botvac Connected 2.2.0 and Botvac 85 1.2.1 devices.

LOW 12

An issue was discovered on Neato Botvac Connected 2.2.0 and Botvac 85 1.2.1 devices.

CVSS 3.1LOW 2.4 Physical No auth No interaction EPSS 0.00171 Published 2018-09-18 No fix listed CWE-326

Open these records in search →

Critical	1
High	3
Medium	2
Low	1
No CVSS	0