CVE:CVE-2018-20785
CNNVD:CNNVD-201902-865
Neato Robotics Neato Botvac Connected是美国Neato Robotics公司的一款清洁机器人。
Neato Robotics Neato Botvac Connected 2.2.0版本中存在安全漏洞。攻击者可利用该漏洞绕过Secure boot，提取内存内容，例如：原始的固件及敏感的信息（Wi-Fi凭证）。
solution:Upgrade neatorobotics botvac_d4_connected_firmware to a higher version than 2.2.0,and avoid the version 2.2.0; Upgrade neatorobotics botvac_d6_connected_firmware to a higher version than 2.2.0,and avoid the version 2.2.0; Upgrade neatorobotics botvac_d5_connected_firmware to a higher version than 2.2.0,and avoid the version 2.2.0; Upgrade neatorobotics botvac_d7_connected_firmware to a higher version than 2.2.0,and avoid the version 2.2.0; Upgrade neatorobotics botvac_d3_connected_firmware to a higher version than 2.2.0,and avoid the version 2.2.0; Upgrade neatorobotics botvac_d3_pro_connected_firmware to a higher version than 2.2.0,and avoid the version 2.2.0; Upgrade neatorobotics botvac_connected_firmware to a higher version than 2.2.0,and avoid the version 2.2.0