CVE-2018-17176

Severity: high (CVSS 7.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2018-09-18 · updated 2026-06-17
Weakness: CWE-294

Description

A replay issue was discovered on Neato Botvac Connected 2.2.0 devices. Manual control mode requires authentication, but once recorded, the authentication (always transmitted in cleartext) can be replayed to /bin/webserver on port 8081. There are no nonces, and timestamps are not checked at all.

Affected products

Neatorobotics Botvac D4 Connected Firmware: 2.2.0
Neatorobotics Botvac D6 Connected Firmware: 2.2.0
Neatorobotics Botvac D7 Connected Firmware: 2.2.0

References

https://media.ccc.de/v/2018-124-pinky-brain-are-taking-over-the-world-with-vacuum-cleaners
https://media.ccc.de/v/2018-124-pinky-brain-are-taking-over-the-world-with-vacuum-cleaners

Get alerted when CVE-2018-17176 or the next vulnerability affects your stack