Improper certificate validation in ECOVACS DEEBOT X5 PRO PLUS
Priority HIGH 76CWE-295Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Attack requirements
- Present
- Impact type
- Spoofing
- Confidentiality · integrity · availability
- High · High · None
- Fix status
- Fixed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-295.
Summary
ECOVACS lawnmowers and vacuums do not properly validate TLS certificates. An unauthenticated attacker can read or modify TLS traffic, possibly modifying firmware updates.
Why it matters now
Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00352 29th percentileScored 2026-11-07
Public exploit Yes 2 exploit referencesTagged by NVD
Fix Fixed DEEBOT X5 PRO PLUS (ECOVACS): 1.38.0DEEBOT X5 PRO (ECOVACS): 1.70.0+18 more products
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- Poc
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| ECOVACS | DEEBOT X5 PRO PLUS | before 1.38.0 | 1.38.0 | Patch available | CNA |
| ECOVACS | DEEBOT X5 PRO | before 1.70.0 | 1.70.0 | Patch available | CNA |
| ECOVACS | DEEBOT X2S | before 1.49.0 | 1.49.0 | Patch available | CNA |
| ECOVACS | DEEBOT X2 OMNI | before 1.76.6 | 1.76.6 | Patch available | CNA |
| ECOVACS | DEEBOT X1 TURBO | before 2.4.41 | 2.4.41 | Patch available | CNA |
| ECOVACS | DEEBOT X1 | before 1.7.3 | 1.7.3 | Patch available | CNA |
| ECOVACS | DEEBOT X1S PRO | before 2.5.31 | 2.5.31 | Patch available | CNA |
| ECOVACS | DEEBOT X1e OMNI | before 2.4.42 | 2.4.42 | Patch available | CNA |
| ECOVACS | DEEBOT T10 PLUS | before 1.7.5 | 1.7.5 | Patch available | CNA |
| ECOVACS | DEEBOT T10 OMNI | before 1.9.0 | 1.9.0 | Patch available | CNA |
| ECOVACS | DEEBOT X5 PRO ULTRA | before 1.17.0 | 1.17.0 | Patch available | CNA |
| ECOVACS | Mate X | before 1.44.18 | 1.44.18 | Patch available | CNA |
| ECOVACS | DEEBOT X2 PRO | before 1.76.6 | 1.76.6 | Patch available | CNA |
| ECOVACS | DEEBOT X2 COMBO | before 1.81.10 | 1.81.10 | Patch available | CNA |
| ECOVACS | DEEBOT X1 OMNI | before 2.4.41 | 2.4.41 | Patch available | CNA |
| ECOVACS | DEEBOT X1 PRO OMNI | before 2.4.41 | 2.4.41 | Patch available | CNA |
| ECOVACS | DEEBOT X1 PLUS | before 1.7.3 | 1.7.3 | Patch available | CNA |
| ECOVACS | DEEBOT X1S PRO PLUS | before 1.23.0 | 1.23.0 | Patch available | CNA |
| ECOVACS | DEEBOT T10 TURBO | before 1.10.0 | 1.10.0 | Patch available | CNA |
| ECOVACS | DEEBOT T10 | before 1.7.5 | 1.7.5 | Patch available | CNA |
- DEEBOT X5 PRO PLUS VendorECOVACS Affected before 1.38.0 Fixed in 1.38.0 Patch available CNA
- DEEBOT X5 PRO VendorECOVACS Affected before 1.70.0 Fixed in 1.70.0 Patch available CNA
- DEEBOT X2S VendorECOVACS Affected before 1.49.0 Fixed in 1.49.0 Patch available CNA
- DEEBOT X2 OMNI VendorECOVACS Affected before 1.76.6 Fixed in 1.76.6 Patch available CNA
- DEEBOT X1 TURBO VendorECOVACS Affected before 2.4.41 Fixed in 2.4.41 Patch available CNA
- DEEBOT X1 VendorECOVACS Affected before 1.7.3 Fixed in 1.7.3 Patch available CNA
- DEEBOT X1S PRO VendorECOVACS Affected before 2.5.31 Fixed in 2.5.31 Patch available CNA
- DEEBOT X1e OMNI VendorECOVACS Affected before 2.4.42 Fixed in 2.4.42 Patch available CNA
- DEEBOT T10 PLUS VendorECOVACS Affected before 1.7.5 Fixed in 1.7.5 Patch available CNA
- DEEBOT T10 OMNI VendorECOVACS Affected before 1.9.0 Fixed in 1.9.0 Patch available CNA
- DEEBOT X5 PRO ULTRA VendorECOVACS Affected before 1.17.0 Fixed in 1.17.0 Patch available CNA
- Mate X VendorECOVACS Affected before 1.44.18 Fixed in 1.44.18 Patch available CNA
- DEEBOT X2 PRO VendorECOVACS Affected before 1.76.6 Fixed in 1.76.6 Patch available CNA
- DEEBOT X2 COMBO VendorECOVACS Affected before 1.81.10 Fixed in 1.81.10 Patch available CNA
- DEEBOT X1 OMNI VendorECOVACS Affected before 2.4.41 Fixed in 2.4.41 Patch available CNA
- DEEBOT X1 PRO OMNI VendorECOVACS Affected before 2.4.41 Fixed in 2.4.41 Patch available CNA
- DEEBOT X1 PLUS VendorECOVACS Affected before 1.7.3 Fixed in 1.7.3 Patch available CNA
- DEEBOT X1S PRO PLUS VendorECOVACS Affected before 1.23.0 Fixed in 1.23.0 Patch available CNA
- DEEBOT T10 TURBO VendorECOVACS Affected before 1.10.0 Fixed in 1.10.0 Patch available CNA
- DEEBOT T10 VendorECOVACS Affected before 1.7.5 Fixed in 1.7.5 Patch available CNA
CPE configurations NVD · 40
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:ecovacs:deebot_x2_omni_firmware:*:*:*:*:*:*:*:* | before 1.76.6 | Vulnerable | ECOVACS |
| cpe:2.3:h:ecovacs:deebot_x2_omni:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ECOVACS |
| cpe:2.3:o:ecovacs:deebot_x2_combo_firmware:*:*:*:*:*:*:*:* | before 1.81.10 | Vulnerable | ECOVACS |
| cpe:2.3:h:ecovacs:deebot_x2_combo:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ECOVACS |
| cpe:2.3:o:ecovacs:deebot_x2s_firmware:*:*:*:*:*:*:*:* | before 1.49.0 | Vulnerable | ECOVACS |
| cpe:2.3:h:ecovacs:deebot_x2s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ECOVACS |
| cpe:2.3:o:ecovacs:deebot_x5_pro_firmware:*:*:*:*:*:*:*:* | before 1.70.0 | Vulnerable | ECOVACS |
| cpe:2.3:h:ecovacs:deebot_x5_pro:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ECOVACS |
| cpe:2.3:o:ecovacs:deebot_x5_pro_plus_firmware:*:*:*:*:*:*:*:* | before 1.38.0 | Vulnerable | ECOVACS |
| cpe:2.3:h:ecovacs:deebot_x5_pro_plus:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ECOVACS |
- cpe:2.3:o:ecovacs:deebot_x2_omni_firmware:*:*:*:*:*:*:*:* Versions before 1.76.6 Vulnerable ·ECOVACS
- cpe:2.3:h:ecovacs:deebot_x2_omni:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ECOVACS
- cpe:2.3:o:ecovacs:deebot_x2_combo_firmware:*:*:*:*:*:*:*:* Versions before 1.81.10 Vulnerable ·ECOVACS
- cpe:2.3:h:ecovacs:deebot_x2_combo:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ECOVACS
- cpe:2.3:o:ecovacs:deebot_x2s_firmware:*:*:*:*:*:*:*:* Versions before 1.49.0 Vulnerable ·ECOVACS
- cpe:2.3:h:ecovacs:deebot_x2s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ECOVACS
- cpe:2.3:o:ecovacs:deebot_x5_pro_firmware:*:*:*:*:*:*:*:* Versions before 1.70.0 Vulnerable ·ECOVACS
- cpe:2.3:h:ecovacs:deebot_x5_pro:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ECOVACS
- cpe:2.3:o:ecovacs:deebot_x5_pro_plus_firmware:*:*:*:*:*:*:*:* Versions before 1.38.0 Vulnerable ·ECOVACS
- cpe:2.3:h:ecovacs:deebot_x5_pro_plus:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ECOVACS
Show 30 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:ecovacs:deebot_x5_pro_ultra_firmware:*:*:*:*:*:*:*:* | before 1.17.0 | Vulnerable | ECOVACS |
| cpe:2.3:h:ecovacs:deebot_x5_pro_ultra:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ECOVACS |
| cpe:2.3:o:ecovacs:mate_x_firmware:*:*:*:*:*:*:*:* | before 1.44.18 | Vulnerable | ECOVACS |
| cpe:2.3:h:ecovacs:mate_x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ECOVACS |
| cpe:2.3:o:ecovacs:deebot_x1_omni_firmware:*:*:*:*:*:*:*:* | before 2.4.41 | Vulnerable | ECOVACS |
| cpe:2.3:h:ecovacs:deebot_x1_omni:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ECOVACS |
| cpe:2.3:o:ecovacs:deebot_x1_turbo_firmware:*:*:*:*:*:*:*:* | before 2.4.41 | Vulnerable | ECOVACS |
| cpe:2.3:h:ecovacs:deebot_x1_turbo:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ECOVACS |
| cpe:2.3:o:ecovacs:deebot_x1_pro_omni_firmware:*:*:*:*:*:*:*:* | before 2.4.41 | Vulnerable | ECOVACS |
| cpe:2.3:h:ecovacs:deebot_x1_pro_omni:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ECOVACS |
| cpe:2.3:o:ecovacs:deebot_x1_firmware:*:*:*:*:*:*:*:* | before 1.7.3 | Vulnerable | ECOVACS |
| cpe:2.3:h:ecovacs:deebot_x1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ECOVACS |
| cpe:2.3:o:ecovacs:deebot_x1_plus_firmware:*:*:*:*:*:*:*:* | before 1.7.3 | Vulnerable | ECOVACS |
| cpe:2.3:h:ecovacs:deebot_x1_plus:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ECOVACS |
| cpe:2.3:o:ecovacs:deebot_x1s_pro_firmware:*:*:*:*:*:*:*:* | before 2.5.31 | Vulnerable | ECOVACS |
| cpe:2.3:h:ecovacs:deebot_x1s_pro:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ECOVACS |
| cpe:2.3:o:ecovacs:deebot_x1s_pro_plus_firmware:*:*:*:*:*:*:*:* | before 1.23.0 | Vulnerable | ECOVACS |
| cpe:2.3:h:ecovacs:deebot_x1s_pro_plus:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ECOVACS |
| cpe:2.3:o:ecovacs:deebot_x1e_omni_firmware:*:*:*:*:*:*:*:* | before 2.4.42 | Vulnerable | ECOVACS |
| cpe:2.3:h:ecovacs:deebot_x1e_omni:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ECOVACS |
| cpe:2.3:o:ecovacs:deebot_t10_turbo_firmware:*:*:*:*:*:*:*:* | before 1.10.0 | Vulnerable | ECOVACS |
| cpe:2.3:h:ecovacs:deebot_t10_turbo:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ECOVACS |
| cpe:2.3:o:ecovacs:deebot_t10_plus_firmware:*:*:*:*:*:*:*:* | before 1.7.5 | Vulnerable | ECOVACS |
| cpe:2.3:h:ecovacs:deebot_t10_plus:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ECOVACS |
| cpe:2.3:o:ecovacs:deebot_t10_firmware:*:*:*:*:*:*:*:* | before 1.7.5 | Vulnerable | ECOVACS |
| cpe:2.3:h:ecovacs:deebot_t10:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ECOVACS |
| cpe:2.3:o:ecovacs:deebot_t10_omni_firmware:*:*:*:*:*:*:*:* | before 1.9.0 | Vulnerable | ECOVACS |
| cpe:2.3:h:ecovacs:deebot_t10_omni:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ECOVACS |
| cpe:2.3:o:ecovacs:deebot_x2_pro_firmware:*:*:*:*:*:*:*:* | before 1.76.6 | Vulnerable | ECOVACS |
| cpe:2.3:h:ecovacs:deebot_x2_pro:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ECOVACS |
- cpe:2.3:o:ecovacs:deebot_x5_pro_ultra_firmware:*:*:*:*:*:*:*:* Versions before 1.17.0 Vulnerable ·ECOVACS
- cpe:2.3:h:ecovacs:deebot_x5_pro_ultra:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ECOVACS
- cpe:2.3:o:ecovacs:mate_x_firmware:*:*:*:*:*:*:*:* Versions before 1.44.18 Vulnerable ·ECOVACS
- cpe:2.3:h:ecovacs:mate_x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ECOVACS
- cpe:2.3:o:ecovacs:deebot_x1_omni_firmware:*:*:*:*:*:*:*:* Versions before 2.4.41 Vulnerable ·ECOVACS
- cpe:2.3:h:ecovacs:deebot_x1_omni:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ECOVACS
- cpe:2.3:o:ecovacs:deebot_x1_turbo_firmware:*:*:*:*:*:*:*:* Versions before 2.4.41 Vulnerable ·ECOVACS
- cpe:2.3:h:ecovacs:deebot_x1_turbo:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ECOVACS
- cpe:2.3:o:ecovacs:deebot_x1_pro_omni_firmware:*:*:*:*:*:*:*:* Versions before 2.4.41 Vulnerable ·ECOVACS
- cpe:2.3:h:ecovacs:deebot_x1_pro_omni:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ECOVACS
- cpe:2.3:o:ecovacs:deebot_x1_firmware:*:*:*:*:*:*:*:* Versions before 1.7.3 Vulnerable ·ECOVACS
- cpe:2.3:h:ecovacs:deebot_x1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ECOVACS
- cpe:2.3:o:ecovacs:deebot_x1_plus_firmware:*:*:*:*:*:*:*:* Versions before 1.7.3 Vulnerable ·ECOVACS
- cpe:2.3:h:ecovacs:deebot_x1_plus:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ECOVACS
- cpe:2.3:o:ecovacs:deebot_x1s_pro_firmware:*:*:*:*:*:*:*:* Versions before 2.5.31 Vulnerable ·ECOVACS
- cpe:2.3:h:ecovacs:deebot_x1s_pro:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ECOVACS
- cpe:2.3:o:ecovacs:deebot_x1s_pro_plus_firmware:*:*:*:*:*:*:*:* Versions before 1.23.0 Vulnerable ·ECOVACS
- cpe:2.3:h:ecovacs:deebot_x1s_pro_plus:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ECOVACS
- cpe:2.3:o:ecovacs:deebot_x1e_omni_firmware:*:*:*:*:*:*:*:* Versions before 2.4.42 Vulnerable ·ECOVACS
- cpe:2.3:h:ecovacs:deebot_x1e_omni:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ECOVACS
- cpe:2.3:o:ecovacs:deebot_t10_turbo_firmware:*:*:*:*:*:*:*:* Versions before 1.10.0 Vulnerable ·ECOVACS
- cpe:2.3:h:ecovacs:deebot_t10_turbo:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ECOVACS
- cpe:2.3:o:ecovacs:deebot_t10_plus_firmware:*:*:*:*:*:*:*:* Versions before 1.7.5 Vulnerable ·ECOVACS
- cpe:2.3:h:ecovacs:deebot_t10_plus:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ECOVACS
- cpe:2.3:o:ecovacs:deebot_t10_firmware:*:*:*:*:*:*:*:* Versions before 1.7.5 Vulnerable ·ECOVACS
- cpe:2.3:h:ecovacs:deebot_t10:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ECOVACS
- cpe:2.3:o:ecovacs:deebot_t10_omni_firmware:*:*:*:*:*:*:*:* Versions before 1.9.0 Vulnerable ·ECOVACS
- cpe:2.3:h:ecovacs:deebot_t10_omni:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ECOVACS
- cpe:2.3:o:ecovacs:deebot_x2_pro_firmware:*:*:*:*:*:*:*:* Versions before 1.76.6 Vulnerable ·ECOVACS
- cpe:2.3:h:ecovacs:deebot_x2_pro:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ECOVACS
Remediation
- Fix · CNA DEEBOT X5 PRO PLUS (ECOVACS) Fixed in 1.38.0
- Fix · CNA DEEBOT X5 PRO (ECOVACS) Fixed in 1.70.0
- Fix · CNA DEEBOT X2S (ECOVACS) Fixed in 1.49.0
- Fix · CNA DEEBOT X2 OMNI (ECOVACS) Fixed in 1.76.6
- Fix · CNA DEEBOT X1 TURBO (ECOVACS) Fixed in 2.4.41
- Fix · CNA DEEBOT X1 (ECOVACS) Fixed in 1.7.3
- Fix · CNA DEEBOT X1S PRO (ECOVACS) Fixed in 2.5.31
- Fix · CNA DEEBOT X1e OMNI (ECOVACS) Fixed in 2.4.42
- Fix · CNA DEEBOT T10 PLUS (ECOVACS) Fixed in 1.7.5
- Fix · CNA DEEBOT T10 OMNI (ECOVACS) Fixed in 1.9.0
- Fix · CNA DEEBOT X5 PRO ULTRA (ECOVACS) Fixed in 1.17.0
- Fix · CNA Mate X (ECOVACS) Fixed in 1.44.18
- Fix · CNA DEEBOT X2 PRO (ECOVACS) Fixed in 1.76.6
- Fix · CNA DEEBOT X2 COMBO (ECOVACS) Fixed in 1.81.10
- Fix · CNA DEEBOT X1 OMNI (ECOVACS) Fixed in 2.4.41
- Fix · CNA DEEBOT X1 PRO OMNI (ECOVACS) Fixed in 2.4.41
- Fix · CNA DEEBOT X1 PLUS (ECOVACS) Fixed in 1.7.3
- Fix · CNA DEEBOT X1S PRO PLUS (ECOVACS) Fixed in 1.23.0
- Fix · CNA DEEBOT T10 TURBO (ECOVACS) Fixed in 1.10.0
- Fix · CNA DEEBOT T10 (ECOVACS) Fixed in 1.7.5
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Release ·
ECOVACS DEEBOT X2 OMNI, DEEBOT X2 COMBO and 4 more products 1.17.0, 1.38.0 and 4 more versions
2 records Highest priority Priority HIGH 1 HIGH, 1 LOW
Other records, highest priority first
- TI-2024-34998 ECOVACS robot lawnmowers and vacuums command injectionPriority LOW 34
Timeline
- 2026-10-02 Threatist record created from CVE-2024-52330
- 2026-10-03 Alias added: GHSA-m998-32q9-vxpx
More ECOVACS Deebot T10 Firmware vulnerabilities
- TI-2024-35003 ECOVACS lawnmowers and vacuums deterministic firmware encryption key CVSS 4.0HIGH 7.7
- TI-2024-10331 ECOVACS lawnmowers and vacuums deterministic root password CVSS 4.0HIGH 7.0
- TI-2024-11204 ECOVACS lawnmowers and vacuums static BLE GATT encryption key CVSS 4.0MEDIUM 5.3
- TI-2024-11205 ECOVACS lawnmowers cleartext storage of anti-theft PIN CVSS 4.0MEDIUM 4.8
- TI-2024-35000 ECOVACS lawnmowers and vacuums insecurely store audio warning files CVSS 4.0LOW 1.8
- TI-2025-21535 ECOVACS Vacuum and Base Station accept unsigned firmware CVSS 4.0HIGH 7.5
Sources
- CVE-2024-52330 · CVE Program
- CVE-2024-52330 · NVD
- FIRST EPSS
- GHSA-m998-32q9-vxpx · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences