CVE-2018-19442

PoC —

CVSS 3.0

9.8 critical

EPSS

8%p94

Published

Apr 25, 2019 (Apr 25, 2019)

Modified

Jun 17, 2026

Description

A Buffer Overflow in Network::AuthenticationClient::VerifySignature in /bin/astro in Neato Botvac Connected 2.2.0 allows a remote attacker to execute arbitrary code with root privileges via a crafted POST request to a vendors/neato/robots/[robot_serial]/messages Neato cloud URI on the nucleo.neatocloud.com web site (port 4443).

Vendors: neatorobotics
Products: botvac connected firmware
Weakness: CWE-119
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (7.5%)

In the news0 stories

No ingested article mentions this CVE yet.