Skip to content
OpenAdvisories
Unscored CVE-2018-17177 EUVD-2018-8951GHSA-m5xh-jxq3-g8gc

An issue was discovered on Neato Botvac Connected 2.2.0 and Botvac 85 1.2.1 devices. Static encryption is used for the copying of so-called…

Published Sep 18, 2018 · Updated Sep 17, 2024 · Assigned by mitre

Description

An issue was discovered on Neato Botvac Connected 2.2.0 and Botvac 85 1.2.1 devices. Static encryption is used for the copying of so-called "black box" logs (event logs and core dumps) to a USB stick. These logs are RC4-encrypted with a 9-character password of *^JEd4W!I that is obfuscated by hiding it within a custom /bin/rc4_crypt binary.

References