Vulnerabilities

TI-2024-11205 CVE-2024-12079 · GHSA-qrcf-c92m-949r

ECOVACS lawnmowers cleartext storage of anti-theft PIN

MEDIUM 55

ECOVACS robot lawnmowers store the anti-theft PIN in cleartext on the device filesystem.

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.00152 Published 2025-01-23 No fix listed CWE-312

TI-2024-11204 CVE-2024-12078 · GHSA-pmrp-4wv8-3m9q

MEDIUM 57

ECOVACS robot lawn mowers and vacuums use a shared, static secret key to encrypt BLE GATT messages.

CVSS 4.0MEDIUM 5.3 Adjacent network No auth No interaction EPSS 0.00341 Published 2025-01-23 No fix listed CWE-321

TI-2024-10331 CVE-2024-11147 · GHSA-w3jw-m3f7-54qm

HIGH 66

ECOVACS robot lawnmowers and vacuums use a deterministic root password generated based on model and serial number.

CVSS 4.0HIGH 7.0 Physical No auth No interaction EPSS 0.00413 Published 2025-01-23 No fix listed CWE-798

TI-2024-35003 CVE-2024-52331 · GHSA-7qrq-v84x-p53g

HIGH 69

ECOVACS robot lawnmowers and vacuums use a deterministic symmetric key to decrypt firmware updates.

CVSS 4.0HIGH 7.7 Network No auth User interaction EPSS 0.00223 Published 2025-01-23 No fix listed CWE-1391

TI-2024-35000 CVE-2024-52328 · GHSA-92x4-p455-q3x7

MEDIUM 43

ECOVACS robot lawnmowers and vacuums insecurely store audio files used to indicate that the camera is on.

CVSS 4.0LOW 1.8 Local High privileges No interaction EPSS 0.00215 Published 2025-01-23 No fix listed CWE-732

TI-2024-34998 CVE-2024-52325 · GHSA-wgmc-5v7x-58m5

LOW 34

ECOVACS robot lawnmowers and vacuums are vulnerable to command injection via SetNetPin() over an unauthenticated BLE connection.

CVSS 4.0MEDIUM 5.8 Adjacent network No auth No interaction EPSS 0.03127 Published 2025-01-23 Fixed in 1.36.187, 1.49.0 +8 CWE-77