CVE-2018-17176: Neatorobotics Botvac d4 Connected Firmware

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

A replay issue was discovered on Neato Botvac Connected 2.2.0 devices. Manual control mode requires authentication, but once recorded, the authentication (always transmitted in cleartext) can be replayed to /bin/webserver on port 8081. There are no nonces, and timestamps are not checked at all.

Affected products

• Neatorobotics Botvac d4 Connected Firmware: version 2.2.0 only
• Neatorobotics Botvac d6 Connected Firmware: version 2.2.0 only
• Neatorobotics Botvac d7 Connected Firmware: version 2.2.0 only

Published 2018-09-18. Last modified 2026-06-17.