CVE-2018-18638

A command injection vulnerability in the setup API in the Neato Botvac Connected 2.2.0 allows network attackers to execute arbitrary commands via shell…

published October 24, 2018

CVSS
—
EPSS
3%
Percentile
86.5
In the wild
Unconfirmed
What it is

A command injection vulnerability in the setup API in the Neato Botvac Connected 2.2.0 allows network attackers to execute arbitrary commands via shell metacharacters in the ntp field within JSON data to the /robot/initialize endpoint.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02832 · 86.5th percentile
Published
2018-10-24T22:00Z
EPSS history
Timeline
  • 24 OCT 22:00Z
    A command injection vulnerability in the setup API in the Neato Botvac Connected 2.2.0 allows network attackers to execute arbitrary commands via shell…
    cvelistv5