What is the CVSS score of CVE-2018-17177?

CVE-2018-17177 has a CVSS 3.1 base score of 2.4 (Low). CVSS vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N. EPSS exploitation probability: 0.2%.

Is there a public PoC exploit available for CVE-2018-17177?

Yes, a public proof-of-concept exploit is available for CVE-2018-17177. Prioritise patching immediately. EPSS: 0.2%.

Botvac D4 Connected Firmware CVE-2018-17177

LOW

Inadequate Encryption Strength (CWE-326)

2018-09-18 cve@mitre.org

Information Disclosure Botvac D4 Connected Firmware Botvac D6 Connected Firmware Botvac D5 Connected Firmware Botvac D7 Connected Firmware Botvac D3 Connected Firmware Botvac 85 Firmware

2.4

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

2.4 LOW

AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Attack Vector

Physical

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

None

Lifecycle Timeline

CVE Published

Sep 18, 2018 - 18:29 nvd

LOW 2.4

DescriptionNVD

An issue was discovered on Neato Botvac Connected 2.2.0 and Botvac 85 1.2.1 devices. Static encryption is used for the copying of so-called "black box" logs (event logs and core dumps) to a USB stick. These logs are RC4-encrypted with a 9-character password of *^JEd4W!I that is obfuscated by hiding it within a custom /bin/rc4_crypt binary.

AnalysisAI

An issue was discovered on Neato Botvac Connected 2.2.0 and Botvac 85 1.2.1 devices. Rated low severity (CVSS 2.4), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-326. An issue was discovered on Neato Botvac Connected 2.2.0 and Botvac 85 1.2.1 devices. Static encryption is used for the copying of so-called "black box" logs (event logs and core dumps) to a USB stick. These logs are RC4-encrypted with a 9-character password of *^JEd4W!I that is obfuscated by hiding it within a custom /bin/rc4_crypt binary. Affected products include: Neatorobotics Botvac D4 Connected Firmware, Neatorobotics Botvac D6 Connected Firmware, Neatorobotics Botvac D5 Connected Firmware, Neatorobotics Botvac D7 Connected Firmware, Neatorobotics Botvac D3 Connected Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.