Security Concerns with Yarbo Robot Mowers

Robot mowers, designed to ease yard maintenance, are under scrutiny for security flaws. A report highlights issues with Yarbo robots, posing risks like remote access and Wi-Fi credential theft. Approximately 6,000 robots face these vulnerabilities.

Researchers Raise Security Concerns

Security expert Andreas Makris identified critical security weaknesses in Yarbo’s autonomous mowers and snow blowers. The concerns include remote access enabled by a persistent setup, a shared root password, and a remote connection linked to the device’s serial number. These factors allow administrative control over the robot, creating potential risks for users.

Implications for Home Networks

Internet connectivity is often essential for the operation of smart devices, including Yarbo robots. Makris suggests that these devices pose a greater threat due to inherent remote access designed into the system, not activated solely for support. Attackers could exploit these vulnerabilities to access internal functions and eavesdrop on the owner’s network.

A robot mower might be parked in your yard, but its network access can tap into your home Wi-Fi.

Concerns Over Camera and Wi-Fi Security

Yarbo robots may stream multiple camera feeds from areas such as driveways and backyards. If exploited, these feeds compromise privacy. The report also warns of saved Wi-Fi credentials being extracted by attackers, escalating network vulnerability.

Yarbo’s Response and Measures

Following the security report, Yarbo confirmed serious vulnerabilities in its systems. The company has begun implementing fixes, like retiring outdated credentials. Updates to Yarbo’s mobile app reduce previous static credentials risks, but further changes are ongoing.

Privacy Transparency and User Precautions

Yarbo’s data connections, including with Chinese entities, raise transparency issues. Users should be aware of where data is sent and whether external access is justified. For better security, experts suggest keeping smart devices on a guest network and regularly updating devices.

Steps for Yarbo Owners to Enhance Security

• Place the robot on a separate guest network.
• Update your Wi-Fi password if security concerns arise.
• Monitor connected devices through your router.
• Limit the robot’s network access through router settings.
• Seek detailed information from Yarbo regarding remote diagnostic access.
• Ensure the robot receives updates through a secure network connection.

Smart devices offer convenience, but the need for robust security measures remains. When considering smart yard devices, prioritize security inquiries over battery life assessments.