Skip to content

Interesting findings from the firmware of the RoboUP Lawn Mower that I bought from Kickstarter

License

Notifications You must be signed in to change notification settings

jrm16020/roboup-mower

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

9 Commits
 
 
 
 
 
 
 
 
 
 

Repository files navigation

Insecure Lawn Mower Ahead!

Recordings available now and in the future on Youtube to help with demonstrating the issues.

ports

If you want to know more about the lawn mower, just log in and check it out!

adb

More to come as I get more free time. The mower is running on the RV1126_RV1109 demo board from Rockchip and has lots of services running that have no clear use case.

CVEs

  • CVE-2023-43214 -- Unauthenticated remote code execution via ADB exposed to the LAN
  • CVE-2023-43215 -- Information disclosure via unauthenticated MQTT broker

About

Interesting findings from the firmware of the RoboUP Lawn Mower that I bought from Kickstarter

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published