ecovacs vulnerabilities and exploits

(subscribe to this query)

ECOVACS lawnmowers and vacuums do not properly validate TLS certificates. An unauthenticated attacker can read or modify TLS traffic, possibly modifying firmware updates.

Ecovacs Deebot X5 Pro Plus Ecovacs Deebot X5 Pro Ecovacs Deebot X2s Ecovacs Deebot X2 Omni Ecovacs Deebot X1 Turbo Ecovacs Deebot X1 Ecovacs Deebot X1s Pro Ecovacs Deebot X1e Omni Ecovacs Deebot T10 Plus Ecovacs Deebot T10 Omni Ecovacs Deebot X5 Pro Ultra Ecovacs Mate X

ECOVACS robot lawnmowers and vacuums are vulnerable to command injection via SetNetPin() over an unauthenticated BLE connection.

Ecovacs Goat G1 Ecovacs Goat G1-800 Ecovacs Deebot X2s Ecovacs Deebot X5 Pro Ecovacs Deebot X5 Pro Plus Ecovacs Deebot T30 Omni Ecovacs Deebot T30s Ecovacs Goat G1-2000 Ecovacs Goat Gx-600 Ecovacs Deebot X2 Omni Ecovacs Deebot X2 Combo Ecovacs Deebot X5 Pro Ultra

The cloud service used by ECOVACS robot lawnmowers and vacuums allows authenticated malicious users to bypass the PIN entry required to access the live video feed.

Ecovacs Ecovacs Home Ecovacs Cloud Service

ECOVACS HOME mobile app plugins for specific robots do not properly validate TLS certificates. An unauthenticated attacker can read or modify TLS traffic and obtain authentication tokens.

Ecovacs Ecovacs Home

ECOVACS robot lawnmowers and vacuums use a deterministic root password generated based on model and serial number. An attacker with shell access can login as root.

Ecovacs Unspecified Robots

ECOVACS robot lawnmowers store the anti-theft PIN in cleartext on the device filesystem. An attacker can steal a lawnmower, read the PIN, and reset the anti-theft mechanism.

Ecovacs Unspecified Robots

ECOVACS robot lawn mowers and vacuums use a shared, static secret key to encrypt BLE GATT messages. An unauthenticated attacker within BLE range can control any robot using the same key.

Ecovacs Unspecified Robots

ECOVACS robot lawnmowers and vacuums insecurely store audio files used to indicate that the camera is on. An attacker with access to the /data filesystem can delete or modify warning files such that users may not be aware that the camera is on.

Ecovacs Unspecified Robots

ECOVACS robot lawnmowers and vacuums use a deterministic symmetric key to decrypt firmware updates. An attacker can create and encrypt malicious firmware that will be successfully decrypted and installed by the robot.

Ecovacs Unspecified Robots

ECOVACS Robotics Deebot T20 OMNI and T20e OMNI prior to 1.24.0 exists to contain a WiFi Remote Code Execution vulnerability.

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook