cvelistv5 - CVE-2024-11147

CVE-2024-11147 (GCVE-0-2024-11147)

Vulnerability from cvelistv5

Published

2025-01-23 16:37

Modified

2025-02-12 17:07

Severity ?

7.6 (High) - CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
7.0 (High) - CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

CWE

CWE-798 - Use of Hard-coded Credentials

Summary

ECOVACS robot lawnmowers and vacuums use a deterministic root password generated based on model and serial number. An attacker with shell access can login as root.

References

URL

	Vendor	Product	Version
	ECOVACS	Unspecified robots	Version: *

va-25-022-01

Vulnerability from csaf_cisa

Published

2025-01-23 00:53

Modified

2025-01-23 00:53

Summary

ECOVACS lawnmower and vacuum vulnerabilities

Notes

Legal Notice

All information products included in https://github.com/cisagov/CSAF/tree/develop/csaf_files/IT/white are provided \"as is\" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.

Countries and Areas Deployed

Worldwide

Company Headquarters Location

Suzhou, China

Critical Infrastructure Sectors

None

Risk Evaluation

ECOVACS lawnmowers, vacuums, and other robots contain multiple vulnerabilities. In some cases, using a combination of vulnerabilities, an attacker within Bluetooth range or with appropriate network access can take complete control of a robot device. Some vulnerabilities allow an attacker to access device cameras and microphones. Note that the list of affected products is incomplete.

Recommended Practices

Review ECOVACS advisories and update robot firmware and mobile apps.

JSON

To clipboard

{
  "document": {
    "category": "csaf_vex",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE"
      }
    },
    "lang": "en-US",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "All information products included in https://github.com/cisagov/CSAF/tree/develop/csaf_files/IT/white are provided \\\"as is\\\" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.",
        "title": "Legal Notice"
      },
      {
        "category": "other",
        "text": "Worldwide",
        "title": "Countries and Areas Deployed"
      },
      {
        "category": "other",
        "text": "Suzhou, China",
        "title": "Company Headquarters Location"
      },
      {
        "category": "other",
        "text": "None",
        "title": "Critical Infrastructure Sectors"
      },
      {
        "category": "summary",
        "text": "ECOVACS lawnmowers, vacuums, and other robots contain multiple vulnerabilities. In some cases, using a combination of vulnerabilities, an attacker within Bluetooth range or with appropriate network access can take complete control of a robot device. Some vulnerabilities allow an attacker to access device cameras and microphones. Note that the list of affected products is incomplete.",
        "title": "Risk Evaluation"
      },
      {
        "category": "general",
        "text": "Review ECOVACS advisories and update robot firmware and mobile apps.",
        "title": "Recommended Practices"
      }
    ],
    "publisher": {
      "category": "coordinator",
      "contact_details": "https://www.cisa.gov/report ",
      "issuing_authority": "CISA",
      "name": "CISA",
      "namespace": "https://www.cisa.gov"
    },
    "references": [
      {
        "category": "self",
        "summary": "Vulnerability Advisory VA-25-022-01 CSAF",
        "url": "https://github.com/cisagov/CSAF/blob/develop/csaf_files/IT/white/2025/va-25-022-01.json"
      }
    ],
    "title": "ECOVACS lawnmower and vacuum vulnerabilities",
    "tracking": {
      "current_release_date": "2025-01-23T00:53:24Z",
      "generator": {
        "date": "2025-01-24T03:45:51Z",
        "engine": {
          "name": "Secvisogram",
          "version": "2.5.17"
        }
      },
      "id": "VA-25-022-01",
      "initial_release_date": "2025-01-23T00:53:24Z",
      "revision_history": [
        {
          "date": "2025-01-22T00:00:00Z",
          "number": "1.0.0",
          "summary": "Initial publication"
        }
      ],
      "status": "final",
      "version": "1.0.0"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "vers:all/*",
                "product": {
                  "name": "ECOVACS AIRBOT Z1 *",
                  "product_id": "CSAFPID-0001"
                }
              }
            ],
            "category": "product_name",
            "name": "AIRBOT Z1"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c2024-12-17",
                "product": {
                  "name": "ECOVACS cloud service 0 \u003c 2024-12-17",
                  "product_id": "CSAFPID-0002"
                }
              },
              {
                "category": "product_version",
                "name": "2024-12-17",
                "product": {
                  "name": "ECOVACS cloud service 2024-12-17",
                  "product_id": "CSAFPID-0003"
                }
              }
            ],
            "category": "product_name",
            "name": "cloud service"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "vers:all/*",
                "product": {
                  "name": "ECOVACS DEEBOT N30 OMNI *",
                  "product_id": "CSAFPID-0004"
                }
              }
            ],
            "category": "product_name",
            "name": "DEEBOT N30 OMNI"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "vers:all/*",
                "product": {
                  "name": "ECOVACS DEEBOT N30 PRO OMNI *",
                  "product_id": "CSAFPID-0005"
                }
              }
            ],
            "category": "product_name",
            "name": "DEEBOT N30 PRO OMNI"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c1.7.5",
                "product": {
                  "name": "ECOVACS DEEBOT T10 0 \u003c 1.7.5",
                  "product_id": "CSAFPID-0006"
                }
              },
              {
                "category": "product_version",
                "name": "1.7.5",
                "product": {
                  "name": "ECOVACS DEEBOT T10 1.7.5",
                  "product_id": "CSAFPID-0007"
                }
              }
            ],
            "category": "product_name",
            "name": "DEEBOT T10"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c1.9.0",
                "product": {
                  "name": "ECOVACS DEEBOT T10 OMNI 0 \u003c 1.9.0",
                  "product_id": "CSAFPID-0008"
                }
              },
              {
                "category": "product_version",
                "name": "1.9.0",
                "product": {
                  "name": "ECOVACS DEEBOT T10 OMNI 1.9.0",
                  "product_id": "CSAFPID-0009"
                }
              }
            ],
            "category": "product_name",
            "name": "DEEBOT T10 OMNI"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "1.7.5",
                "product": {
                  "name": "ECOVACS DEEBOT T10 PLUS 1.7.5",
                  "product_id": "CSAFPID-0010"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c1.7.5",
                "product": {
                  "name": "ECOVACS DEEBOT T10 PLUS 0 \u003c 1.7.5",
                  "product_id": "CSAFPID-0011"
                }
              }
            ],
            "category": "product_name",
            "name": "DEEBOT T10 PLUS"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "1.10.0",
                "product": {
                  "name": "ECOVACS DEEBOT T10 TURBO 1.10.0",
                  "product_id": "CSAFPID-0012"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c1.10.0",
                "product": {
                  "name": "ECOVACS DEEBOT T10 TURBO 0 \u003c 1.10.0",
                  "product_id": "CSAFPID-0013"
                }
              }
            ],
            "category": "product_name",
            "name": "DEEBOT T10 TURBO"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c1.93.0",
                "product": {
                  "name": "ECOVACS DEEBOT T30 OMNI 0 \u003c 1.93.0",
                  "product_id": "CSAFPID-0014"
                }
              },
              {
                "category": "product_version",
                "name": "1.93.0",
                "product": {
                  "name": "ECOVACS DEEBOT T30 OMNI 1.93.0",
                  "product_id": "CSAFPID-0015"
                }
              }
            ],
            "category": "product_name",
            "name": "DEEBOT T30 OMNI"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c1.95.0",
                "product": {
                  "name": "ECOVACS DEEBOT T30S 0 \u003c 1.95.0",
                  "product_id": "CSAFPID-0016"
                }
              },
              {
                "category": "product_version",
                "name": "1.95.0",
                "product": {
                  "name": "ECOVACS DEEBOT T30S 1.95.0",
                  "product_id": "CSAFPID-0017"
                }
              }
            ],
            "category": "product_name",
            "name": "DEEBOT T30S"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "1.7.3",
                "product": {
                  "name": "ECOVACS DEEBOT X1 1.7.3",
                  "product_id": "CSAFPID-0018"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c1.7.3",
                "product": {
                  "name": "ECOVACS DEEBOT X1 0 \u003c 1.7.3",
                  "product_id": "CSAFPID-0019"
                }
              }
            ],
            "category": "product_name",
            "name": "DEEBOT X1"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "2.4.42",
                "product": {
                  "name": "ECOVACS DEEBOT X1e OMNI 2.4.42",
                  "product_id": "CSAFPID-0020"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c2.4.42",
                "product": {
                  "name": "ECOVACS DEEBOT X1e OMNI 0 \u003c 2.4.42",
                  "product_id": "CSAFPID-0021"
                }
              }
            ],
            "category": "product_name",
            "name": "DEEBOT X1e OMNI"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c2.4.41",
                "product": {
                  "name": "ECOVACS DEEBOT X1 OMNI 0 \u003c 2.4.41",
                  "product_id": "CSAFPID-0022"
                }
              },
              {
                "category": "product_version",
                "name": "2.4.41",
                "product": {
                  "name": "ECOVACS DEEBOT X1 OMNI 2.4.41",
                  "product_id": "CSAFPID-0023"
                }
              }
            ],
            "category": "product_name",
            "name": "DEEBOT X1 OMNI"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "1.7.3",
                "product": {
                  "name": "ECOVACS DEEBOT X1 PLUS 1.7.3",
                  "product_id": "CSAFPID-0024"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c1.7.3",
                "product": {
                  "name": "ECOVACS DEEBOT X1 PLUS 0 \u003c 1.7.3",
                  "product_id": "CSAFPID-0025"
                }
              }
            ],
            "category": "product_name",
            "name": "DEEBOT X1 PLUS"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "2.4.41",
                "product": {
                  "name": "ECOVACS DEEBOT X1 PRO OMNI 2.4.41",
                  "product_id": "CSAFPID-0026"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c2.4.41",
                "product": {
                  "name": "ECOVACS DEEBOT X1 PRO OMNI 0 \u003c 2.4.41",
                  "product_id": "CSAFPID-0027"
                }
              }
            ],
            "category": "product_name",
            "name": "DEEBOT X1 PRO OMNI"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "2.5.31",
                "product": {
                  "name": "ECOVACS DEEBOT X1S PRO 2.5.31",
                  "product_id": "CSAFPID-0028"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c2.5.31",
                "product": {
                  "name": "ECOVACS DEEBOT X1S PRO 0 \u003c 2.5.31",
                  "product_id": "CSAFPID-0029"
                }
              }
            ],
            "category": "product_name",
            "name": "DEEBOT X1S PRO"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "1.23.0",
                "product": {
                  "name": "ECOVACS DEEBOT X1S PRO PLUS 1.23.0",
                  "product_id": "CSAFPID-0030"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c1.23.0",
                "product": {
                  "name": "ECOVACS DEEBOT X1S PRO PLUS 0 \u003c 1.23.0",
                  "product_id": "CSAFPID-0031"
                }
              }
            ],
            "category": "product_name",
            "name": "DEEBOT X1S PRO PLUS"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c2.4.41",
                "product": {
                  "name": "ECOVACS DEEBOT X1 TURBO 0 \u003c 2.4.41",
                  "product_id": "CSAFPID-0032"
                }
              },
              {
                "category": "product_version",
                "name": "2.4.41",
                "product": {
                  "name": "ECOVACS DEEBOT X1 TURBO 2.4.41",
                  "product_id": "CSAFPID-0033"
                }
              }
            ],
            "category": "product_name",
            "name": "DEEBOT X1 TURBO"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c1.81.10",
                "product": {
                  "name": "ECOVACS DEEBOT X2 COMBO 0 \u003c 1.81.10",
                  "product_id": "CSAFPID-0034"
                }
              },
              {
                "category": "product_version",
                "name": "1.81.10",
                "product": {
                  "name": "ECOVACS DEEBOT X2 COMBO 1.81.10",
                  "product_id": "CSAFPID-0035"
                }
              }
            ],
            "category": "product_name",
            "name": "DEEBOT X2 COMBO"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "1.76.6",
                "product": {
                  "name": "ECOVACS DEEBOT X2  OMNI 1.76.6",
                  "product_id": "CSAFPID-0036"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c1.76.6",
                "product": {
                  "name": "ECOVACS DEEBOT X2  OMNI 0 \u003c 1.76.6",
                  "product_id": "CSAFPID-0037"
                }
              }
            ],
            "category": "product_name",
            "name": "DEEBOT X2  OMNI"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "1.76.6",
                "product": {
                  "name": "ECOVACS DEEBOT X2 PRO 1.76.6",
                  "product_id": "CSAFPID-0038"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c1.76.6",
                "product": {
                  "name": "ECOVACS DEEBOT X2 PRO 0 \u003c 1.76.6",
                  "product_id": "CSAFPID-0039"
                }
              }
            ],
            "category": "product_name",
            "name": "DEEBOT X2 PRO"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c1.49.0",
                "product": {
                  "name": "ECOVACS DEEBOT X2S 0 \u003c 1.49.0",
                  "product_id": "CSAFPID-0040"
                }
              },
              {
                "category": "product_version",
                "name": "1.49.0",
                "product": {
                  "name": "ECOVACS DEEBOT X2S 1.49.0",
                  "product_id": "CSAFPID-0041"
                }
              }
            ],
            "category": "product_name",
            "name": "DEEBOT X2S"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c1.70.0",
                "product": {
                  "name": "ECOVACS DEEBOT X5 PRO 0 \u003c 1.70.0",
                  "product_id": "CSAFPID-0042"
                }
              },
              {
                "category": "product_version",
                "name": "1.70.0",
                "product": {
                  "name": "ECOVACS DEEBOT X5 PRO 1.70.0",
                  "product_id": "CSAFPID-0043"
                }
              }
            ],
            "category": "product_name",
            "name": "DEEBOT X5 PRO"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "1.38.0",
                "product": {
                  "name": "ECOVACS DEEBOT X5 PRO PLUS 1.38.0",
                  "product_id": "CSAFPID-0044"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c1.38.0",
                "product": {
                  "name": "ECOVACS DEEBOT X5 PRO PLUS 0 \u003c 1.38.0",
                  "product_id": "CSAFPID-0045"
                }
              }
            ],
            "category": "product_name",
            "name": "DEEBOT X5 PRO PLUS"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c1.17.0",
                "product": {
                  "name": "ECOVACS DEEBOT X5 PRO ULTRA 0 \u003c 1.17.0",
                  "product_id": "CSAFPID-0046"
                }
              },
              {
                "category": "product_version",
                "name": "1.17.0",
                "product": {
                  "name": "ECOVACS DEEBOT X5 PRO ULTRA 1.17.0",
                  "product_id": "CSAFPID-0047"
                }
              }
            ],
            "category": "product_name",
            "name": "DEEBOT X5 PRO ULTRA"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "3.0.0",
                "product": {
                  "name": "ECOVACS ECOVACS HOME 3.0.0",
                  "product_id": "CSAFPID-0048"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c3.0.0",
                "product": {
                  "name": "ECOVACS ECOVACS HOME 0 \u003c 3.0.0",
                  "product_id": "CSAFPID-0049"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c3.0.2",
                "product": {
                  "name": "ECOVACS ECOVACS HOME 0 \u003c 3.0.2",
                  "product_id": "CSAFPID-0050"
                }
              },
              {
                "category": "product_version",
                "name": "3.0.2",
                "product": {
                  "name": "ECOVACS ECOVACS HOME 3.0.2",
                  "product_id": "CSAFPID-0051"
                }
              }
            ],
            "category": "product_name",
            "name": "ECOVACS HOME"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c1.36.187",
                "product": {
                  "name": "ECOVACS GOAT G1 0 \u003c 1.36.187",
                  "product_id": "CSAFPID-0052"
                }
              },
              {
                "category": "product_version",
                "name": "1.36.187",
                "product": {
                  "name": "ECOVACS GOAT G1 1.36.187",
                  "product_id": "CSAFPID-0053"
                }
              }
            ],
            "category": "product_name",
            "name": "GOAT G1"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c1.36.187",
                "product": {
                  "name": "ECOVACS GOAT G1-2000 0 \u003c 1.36.187",
                  "product_id": "CSAFPID-0054"
                }
              },
              {
                "category": "product_version",
                "name": "1.36.187",
                "product": {
                  "name": "ECOVACS GOAT G1-2000 1.36.187",
                  "product_id": "CSAFPID-0055"
                }
              }
            ],
            "category": "product_name",
            "name": "GOAT G1-2000"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c1.36.187",
                "product": {
                  "name": "ECOVACS GOAT G1-800 0 \u003c 1.36.187",
                  "product_id": "CSAFPID-0056"
                }
              },
              {
                "category": "product_version",
                "name": "1.36.187",
                "product": {
                  "name": "ECOVACS GOAT G1-800 1.36.187",
                  "product_id": "CSAFPID-0057"
                }
              }
            ],
            "category": "product_name",
            "name": "GOAT G1-800"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c1.2.120",
                "product": {
                  "name": "ECOVACS GOAT GX-600 0 \u003c 1.2.120",
                  "product_id": "CSAFPID-0058"
                }
              },
              {
                "category": "product_version",
                "name": "1.2.120",
                "product": {
                  "name": "ECOVACS GOAT GX-600 1.2.120",
                  "product_id": "CSAFPID-0059"
                }
              }
            ],
            "category": "product_name",
            "name": "GOAT GX-600"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "1.44.18",
                "product": {
                  "name": "ECOVACS Mate X 1.44.18",
                  "product_id": "CSAFPID-0060"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c1.44.18",
                "product": {
                  "name": "ECOVACS Mate X 0 \u003c 1.44.18",
                  "product_id": "CSAFPID-0061"
                }
              }
            ],
            "category": "product_name",
            "name": "Mate X"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "vers:all/*",
                "product": {
                  "name": "ECOVACS Unspecified robots *",
                  "product_id": "CSAFPID-0062"
                }
              }
            ],
            "category": "product_name",
            "name": "Unspecified robots"
          }
        ],
        "category": "vendor",
        "name": "ECOVACS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "Dennis Giese",
            "Braelynn Luedtke",
            "Chris Anderson"
          ]
        }
      ],
      "cve": "CVE-2024-52325",
      "cwe": {
        "id": "CWE-77",
        "name": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)"
      },
      "notes": [
        {
          "category": "summary",
          "text": "ECOVACS robot lawnmowers and vacuums are vulnerable to command injection via SetNetPin() over unauthenticated BLE connection.",
          "title": "Description"
        },
        {
          "category": "details",
          "text": "SSVCv2/E:P/A:N/T:T/2024-11-21T21:30:52Z/",
          "title": "SSVC"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-0053",
          "CSAFPID-0057",
          "CSAFPID-0041",
          "CSAFPID-0043",
          "CSAFPID-0044",
          "CSAFPID-0015",
          "CSAFPID-0017",
          "CSAFPID-0055",
          "CSAFPID-0059",
          "CSAFPID-0036",
          "CSAFPID-0035",
          "CSAFPID-0047"
        ],
        "known_affected": [
          "CSAFPID-0052",
          "CSAFPID-0056",
          "CSAFPID-0040",
          "CSAFPID-0042",
          "CSAFPID-0045",
          "CSAFPID-0014",
          "CSAFPID-0016",
          "CSAFPID-0054",
          "CSAFPID-0058",
          "CSAFPID-0037",
          "CSAFPID-0034",
          "CSAFPID-0046"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "dontvacuum.me",
          "url": "https://dontvacuum.me/talks/DEFCON32/DEFCON32_reveng_hacking_ecovacs_robots.pdf"
        },
        {
          "category": "external",
          "summary": "youtu.be",
          "url": "https://youtu.be/_wUsM0Mlenc?t=2041"
        },
        {
          "category": "external",
          "summary": "www.ecovacs.com",
          "url": "https://www.ecovacs.com/global/userhelp/dsa20241130001"
        },
        {
          "category": "external",
          "summary": "www.ecovacs.com",
          "url": "https://www.ecovacs.com/global/userhelp/dsa20241119"
        }
      ],
      "release_date": "2024-08-11T00:00:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-11-30T06:00:00Z",
          "details": "ECOVACS released firmware version 1.36.187.",
          "product_ids": [
            "CSAFPID-0052"
          ],
          "url": "https://www.ecovacs.com/global/userhelp/dsa20241130001"
        },
        {
          "category": "vendor_fix",
          "date": "2024-11-30T06:00:00Z",
          "details": "ECOVACS released firmware version 1.36.187.",
          "product_ids": [
            "CSAFPID-0053"
          ],
          "url": "https://www.ecovacs.com/global/userhelp/dsa20241130001"
        },
        {
          "category": "vendor_fix",
          "date": "2024-11-30T06:00:00Z",
          "details": "ECOVACS released firmware version 1.36.187.",
          "product_ids": [
            "CSAFPID-0056"
          ],
          "url": "https://www.ecovacs.com/global/userhelp/dsa20241130001"
        },
        {
          "category": "vendor_fix",
          "date": "2024-11-30T06:00:00Z",
          "details": "ECOVACS released firmware version 1.36.187.",
          "product_ids": [
            "CSAFPID-0057"
          ],
          "url": "https://www.ecovacs.com/global/userhelp/dsa20241130001"
        },
        {
          "category": "vendor_fix",
          "date": "2024-11-19T06:00:00Z",
          "details": "ECOVACS released firmware version 1.49.0.",
          "product_ids": [
            "CSAFPID-0040"
          ],
          "url": "https://www.ecovacs.com/global/userhelp/dsa20241119"
        },
        {
          "category": "vendor_fix",
          "date": "2024-11-19T06:00:00Z",
          "details": "ECOVACS released firmware version 1.49.0.",
          "product_ids": [
            "CSAFPID-0041"
          ],
          "url": "https://www.ecovacs.com/global/userhelp/dsa20241119"
        },
        {
          "category": "vendor_fix",
          "date": "2024-11-19T06:00:00Z",
          "details": "ECOVACS released firmware version 1.70.0.",
          "product_ids": [
            "CSAFPID-0042"
          ],
          "url": "https://www.ecovacs.com/global/userhelp/dsa20241119"
        },
        {
          "category": "vendor_fix",
          "date": "2024-11-19T06:00:00Z",
          "details": "ECOVACS released firmware version 1.70.0.",
          "product_ids": [
            "CSAFPID-0043"
          ],
          "url": "https://www.ecovacs.com/global/userhelp/dsa20241119"
        },
        {
          "category": "vendor_fix",
          "date": "2024-11-19T06:00:00Z",
          "details": "ECOVACS released firmware version 1.38.0.",
          "product_ids": [
            "CSAFPID-0045"
          ],
          "url": "https://www.ecovacs.com/global/userhelp/dsa20241119"
        },
        {
          "category": "vendor_fix",
          "date": "2024-11-19T06:00:00Z",
          "details": "ECOVACS released firmware version 1.38.0.",
          "product_ids": [
            "CSAFPID-0044"
          ],
          "url": "https://www.ecovacs.com/global/userhelp/dsa20241119"
        },
        {
          "category": "vendor_fix",
          "date": "2024-11-19T06:00:00Z",
          "details": "ECOVACS released firmware version 1.93.0.",
          "product_ids": [
            "CSAFPID-0014"
          ],
          "url": "https://www.ecovacs.com/global/userhelp/dsa20241119"
        },
        {
          "category": "vendor_fix",
          "date": "2024-11-19T06:00:00Z",
          "details": "ECOVACS released firmware version 1.93.0.",
          "product_ids": [
            "CSAFPID-0015"
          ],
          "url": "https://www.ecovacs.com/global/userhelp/dsa20241119"
        },
        {
          "category": "vendor_fix",
          "date": "2024-11-19T06:00:00Z",
          "details": "ECOVACS released firmware version 1.95.0.",
          "product_ids": [
            "CSAFPID-0016"
          ],
          "url": "https://www.ecovacs.com/global/userhelp/dsa20241119"
        },
        {
          "category": "vendor_fix",
          "date": "2024-11-19T06:00:00Z",
          "details": "ECOVACS released firmware version 1.95.0.",
          "product_ids": [
            "CSAFPID-0017"
          ],
          "url": "https://www.ecovacs.com/global/userhelp/dsa20241119"
        },
        {
          "category": "none_available",
          "details": "Unknown.",
          "product_ids": [
            "CSAFPID-0004"
          ]
        },
        {
          "category": "none_available",
          "details": "Unknown.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "vendor_fix",
          "date": "2024-11-30T06:00:00Z",
          "details": "ECOVACS released firmware version 1.36.187.",
          "product_ids": [
            "CSAFPID-0054"
          ],
          "url": "https://www.ecovacs.com/global/userhelp/dsa20241130001"
        },
        {
          "category": "vendor_fix",
          "date": "2024-11-30T06:00:00Z",
          "details": "ECOVACS released firmware version 1.36.187.",
          "product_ids": [
            "CSAFPID-0055"
          ],
          "url": "https://www.ecovacs.com/global/userhelp/dsa20241130001"
        },
        {
          "category": "vendor_fix",
          "date": "2024-11-30T06:00:00Z",
          "details": "ECOVACS released firmware version 1.2.120.",
          "product_ids": [
            "CSAFPID-0058"
          ],
          "url": "https://www.ecovacs.com/global/userhelp/dsa20241130001"
        },
        {
          "category": "vendor_fix",
          "date": "2024-11-30T06:00:00Z",
          "details": "ECOVACS released firmware version 1.2.120.",
          "product_ids": [
            "CSAFPID-0059"
          ],
          "url": "https://www.ecovacs.com/global/userhelp/dsa20241130001"
        },
        {
          "category": "vendor_fix",
          "date": "2024-11-19T06:00:00Z",
          "details": "ECOVACS released firmware version 1.76.6.",
          "product_ids": [
            "CSAFPID-0037"
          ],
          "url": "https://www.ecovacs.com/global/userhelp/dsa20241119"
        },
        {
          "category": "vendor_fix",
          "date": "2024-11-19T06:00:00Z",
          "details": "ECOVACS released firmware version 1.76.6.",
          "product_ids": [
            "CSAFPID-0036"
          ],
          "url": "https://www.ecovacs.com/global/userhelp/dsa20241119"
        },
        {
          "category": "vendor_fix",
          "date": "2024-11-19T06:00:00Z",
          "details": "ECOVACS released firmware version 1.81.10.",
          "product_ids": [
            "CSAFPID-0034"
          ],
          "url": "https://www.ecovacs.com/global/userhelp/dsa20241119"
        },
        {
          "category": "vendor_fix",
          "date": "2024-11-19T06:00:00Z",
          "details": "ECOVACS released firmware version 1.81.10.",
          "product_ids": [
            "CSAFPID-0035"
          ],
          "url": "https://www.ecovacs.com/global/userhelp/dsa20241119"
        },
        {
          "category": "vendor_fix",
          "date": "2024-11-19T06:00:00Z",
          "details": "ECOVACS released firmware version 1.17.0.",
          "product_ids": [
            "CSAFPID-0046"
          ],
          "url": "https://www.ecovacs.com/global/userhelp/dsa20241119"
        },
        {
          "category": "vendor_fix",
          "date": "2024-11-19T06:00:00Z",
          "details": "ECOVACS released firmware version 1.17.0.",
          "product_ids": [
            "CSAFPID-0047"
          ],
          "url": "https://www.ecovacs.com/global/userhelp/dsa20241119"
        },
        {
          "category": "none_available",
          "details": "Unknown.",
          "product_ids": [
            "CSAFPID-0005"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.6,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0052",
            "CSAFPID-0056",
            "CSAFPID-0040",
            "CSAFPID-0042",
            "CSAFPID-0045",
            "CSAFPID-0014",
            "CSAFPID-0016",
            "CSAFPID-0054",
            "CSAFPID-0058",
            "CSAFPID-0037",
            "CSAFPID-0034",
            "CSAFPID-0046"
          ]
        }
      ],
      "title": "ECOVACS robot lawnmowers and vacuums command injection"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Braelynn Luedtke"
          ]
        },
        {
          "names": [
            "Dennis Giese"
          ]
        }
      ],
      "cve": "CVE-2024-52328",
      "cwe": {
        "id": "CWE-732",
        "name": "Incorrect Permission Assignment for Critical Resource"
      },
      "notes": [
        {
          "category": "summary",
          "text": "ECOVACS robot lawnmowers and vacuums insecurely store audio files used to indicate the camera is on. An attacker with access to the /data filesystem can delete or modify warning files such that users may not be aware that the camera is on.",
          "title": "Description"
        },
        {
          "category": "details",
          "text": "SSVCv2/E:P/A:N/T:P/2024-11-21T21:44:10Z/",
          "title": "SSVC"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0062"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "dontvacuum.me",
          "url": "https://dontvacuum.me/talks/HITCON2024/HITCON-CMT-2024_Ecovacs.pdf"
        },
        {
          "category": "external",
          "summary": "dontvacuum.me",
          "url": "https://dontvacuum.me/talks/37c3-2023/37c3-vacuuming-and-mowing.pdf"
        }
      ],
      "release_date": "2023-12-27T00:00:00Z",
      "remediations": [
        {
          "category": "none_available",
          "details": "Any ECOVACS robot with a camera is likely to be affected.",
          "product_ids": [
            "CSAFPID-0062"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 2.3,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0062"
          ]
        }
      ],
      "title": "ECOVACS lawnmowers and vacuums insecurely store audio warning files"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Dennis Giese"
          ]
        },
        {
          "names": [
            "Braelynn Luedtke"
          ]
        }
      ],
      "cve": "CVE-2024-52329",
      "cwe": {
        "id": "CWE-295",
        "name": "Improper Certificate Validation"
      },
      "notes": [
        {
          "category": "summary",
          "text": "ECOVACS HOME mobile app plugins for specific robots do not properly validate TLS certificates. An unauthenticated attacker can read or modify TLS traffic and obtain authentication tokens.",
          "title": "Description"
        },
        {
          "category": "details",
          "text": "SSVCv2/E:P/A:N/T:T/2025-01-16T20:12:16Z/",
          "title": "SSVC"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-0048"
        ],
        "known_affected": [
          "CSAFPID-0049"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "dontvacuum.me",
          "url": "https://dontvacuum.me/talks/HITCON2024/HITCON-CMT-2024_Ecovacs.pdf"
        },
        {
          "category": "external",
          "summary": "dontvacuum.me",
          "url": "https://dontvacuum.me/talks/37c3-2023/37c3-vacuuming-and-mowing.pdf"
        },
        {
          "category": "external",
          "summary": "www.ecovacs.com",
          "url": "https://www.ecovacs.com/global/userhelp/dsa20241217001"
        }
      ],
      "release_date": "2023-12-27T00:00:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-12-17T06:00:00Z",
          "details": "ECOVACS released version 3.0.0 of the ECOVACS HOME app. ECOVACS may have updated plugins for specific robots.",
          "product_ids": [
            "CSAFPID-0048"
          ],
          "url": "https://www.ecovacs.com/global/userhelp/dsa20241217001"
        },
        {
          "category": "vendor_fix",
          "date": "2024-12-17T06:00:00Z",
          "details": "ECOVACS released version 3.0.0 of the ECOVACS HOME app. ECOVACS may have updated plugins for specific robots.",
          "product_ids": [
            "CSAFPID-0049"
          ],
          "url": "https://www.ecovacs.com/global/userhelp/dsa20241217001"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0049"
          ]
        }
      ],
      "title": "ECOVACS HOME mobile app plugins do not properly validate TLS certificates"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Dennis Giese"
          ]
        },
        {
          "names": [
            "Braelynn Luedtke"
          ]
        }
      ],
      "cve": "CVE-2024-52330",
      "cwe": {
        "id": "CWE-295",
        "name": "Improper Certificate Validation"
      },
      "notes": [
        {
          "category": "summary",
          "text": "ECOVACS lawnmowers and vacuums do not properly validate TLS certificates. An unauthenticated attacker can read or modify TLS traffic, possibly modifying firmware updates.",
          "title": "Description"
        },
        {
          "category": "details",
          "text": "SSVCv2/E:P/A:N/T:T/2024-11-22T17:08:48Z/",
          "title": "SSVC"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-0044",
          "CSAFPID-0043",
          "CSAFPID-0041",
          "CSAFPID-0036",
          "CSAFPID-0033",
          "CSAFPID-0018",
          "CSAFPID-0028",
          "CSAFPID-0020",
          "CSAFPID-0010",
          "CSAFPID-0009",
          "CSAFPID-0047",
          "CSAFPID-0060",
          "CSAFPID-0038",
          "CSAFPID-0035",
          "CSAFPID-0023",
          "CSAFPID-0026",
          "CSAFPID-0024",
          "CSAFPID-0030",
          "CSAFPID-0012",
          "CSAFPID-0007"
        ],
        "known_affected": [
          "CSAFPID-0045",
          "CSAFPID-0042",
          "CSAFPID-0040",
          "CSAFPID-0037",
          "CSAFPID-0032",
          "CSAFPID-0019",
          "CSAFPID-0029",
          "CSAFPID-0021",
          "CSAFPID-0011",
          "CSAFPID-0008",
          "CSAFPID-0046",
          "CSAFPID-0061",
          "CSAFPID-0039",
          "CSAFPID-0034",
          "CSAFPID-0022",
          "CSAFPID-0027",
          "CSAFPID-0025",
          "CSAFPID-0031",
          "CSAFPID-0013",
          "CSAFPID-0006"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "dontvacuum.me",
          "url": "https://dontvacuum.me/talks/HITCON2024/HITCON-CMT-2024_Ecovacs.pdf"
        },
        {
          "category": "external",
          "summary": "dontvacuum.me",
          "url": "https://dontvacuum.me/talks/37c3-2023/37c3-vacuuming-and-mowing.pdf"
        },
        {
          "category": "external",
          "summary": "www.ecovacs.com",
          "url": "https://www.ecovacs.com/global/userhelp/dsa20241217001"
        }
      ],
      "release_date": "2023-12-27T00:00:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-12-17T06:00:00Z",
          "details": "ECOVACS has released firmware version 1.38.0.",
          "product_ids": [
            "CSAFPID-0044"
          ],
          "url": "https://www.ecovacs.com/global/userhelp/dsa20241217001"
        },
        {
          "category": "vendor_fix",
          "date": "2024-12-17T06:00:00Z",
          "details": "ECOVACS has released firmware version 1.38.0.",
          "product_ids": [
            "CSAFPID-0045"
          ],
          "url": "https://www.ecovacs.com/global/userhelp/dsa20241217001"
        },
        {
          "category": "vendor_fix",
          "date": "2024-12-17T06:00:00Z",
          "details": "ECOVACS has released firmware version 1.70.0.",
          "product_ids": [
            "CSAFPID-0043"
          ],
          "url": "https://www.ecovacs.com/global/userhelp/dsa20241217001"
        },
        {
          "category": "vendor_fix",
          "date": "2024-12-17T06:00:00Z",
          "details": "ECOVACS has released firmware version 1.70.0.",
          "product_ids": [
            "CSAFPID-0042"
          ],
          "url": "https://www.ecovacs.com/global/userhelp/dsa20241217001"
        },
        {
          "category": "vendor_fix",
          "date": "2024-12-17T06:00:00Z",
          "details": "ECOVACS has released firmware version 1.49.0.",
          "product_ids": [
            "CSAFPID-0040"
          ],
          "url": "https://www.ecovacs.com/global/userhelp/dsa20241217001"
        },
        {
          "category": "vendor_fix",
          "date": "2024-12-17T06:00:00Z",
          "details": "ECOVACS has released firmware version 1.49.0.",
          "product_ids": [
            "CSAFPID-0041"
          ],
          "url": "https://www.ecovacs.com/global/userhelp/dsa20241217001"
        },
        {
          "category": "vendor_fix",
          "date": "2024-12-17T06:00:00Z",
          "details": "ECOVACS has released firmware version 1.76.6.",
          "product_ids": [
            "CSAFPID-0036"
          ],
          "url": "https://www.ecovacs.com/global/userhelp/dsa20241217001"
        },
        {
          "category": "vendor_fix",
          "date": "2024-12-17T06:00:00Z",
          "details": "ECOVACS has released firmware version 1.76.6.",
          "product_ids": [
            "CSAFPID-0037"
          ],
          "url": "https://www.ecovacs.com/global/userhelp/dsa20241217001"
        },
        {
          "category": "vendor_fix",
          "date": "2024-12-17T06:00:00Z",
          "details": "ECOVACS has released firmware version 2.4.41.",
          "product_ids": [
            "CSAFPID-0032"
          ],
          "url": "https://www.ecovacs.com/global/userhelp/dsa20241217001"
        },
        {
          "category": "vendor_fix",
          "date": "2024-12-17T06:00:00Z",
          "details": "ECOVACS has released firmware version 2.4.41.",
          "product_ids": [
            "CSAFPID-0033"
          ],
          "url": "https://www.ecovacs.com/global/userhelp/dsa20241217001"
        },
        {
          "category": "vendor_fix",
          "date": "2024-12-17T06:00:00Z",
          "details": "ECOVACS has released firmware version 1.7.3.",
          "product_ids": [
            "CSAFPID-0018"
          ],
          "url": "https://www.ecovacs.com/global/userhelp/dsa20241217001"
        },
        {
          "category": "vendor_fix",
          "date": "2024-12-17T06:00:00Z",
          "details": "ECOVACS has released firmware version 1.7.3.",
          "product_ids": [
            "CSAFPID-0019"
          ],
          "url": "https://www.ecovacs.com/global/userhelp/dsa20241217001"
        },
        {
          "category": "vendor_fix",
          "date": "2024-12-17T06:00:00Z",
          "details": "ECOVACS has released firmware version 2.5.31.",
          "product_ids": [
            "CSAFPID-0028"
          ],
          "url": "https://www.ecovacs.com/global/userhelp/dsa20241217001"
        },
        {
          "category": "vendor_fix",
          "date": "2024-12-17T06:00:00Z",
          "details": "ECOVACS has released firmware version 2.5.31.",
          "product_ids": [
            "CSAFPID-0029"
          ],
          "url": "https://www.ecovacs.com/global/userhelp/dsa20241217001"
        },
        {
          "category": "vendor_fix",
          "date": "2024-12-17T06:00:00Z",
          "details": "ECOVACS has released firmware version 2.4.42.",
          "product_ids": [
            "CSAFPID-0020"
          ],
          "url": "https://www.ecovacs.com/global/userhelp/dsa20241217001"
        },
        {
          "category": "vendor_fix",
          "date": "2024-12-17T06:00:00Z",
          "details": "ECOVACS has released firmware version 2.4.42.",
          "product_ids": [
            "CSAFPID-0021"
          ],
          "url": "https://www.ecovacs.com/global/userhelp/dsa20241217001"
        },
        {
          "category": "vendor_fix",
          "date": "2024-12-17T06:00:00Z",
          "details": "ECOVACS has released firmware version 1.7.5.",
          "product_ids": [
            "CSAFPID-0010"
          ],
          "url": "https://www.ecovacs.com/global/userhelp/dsa20241217001"
        },
        {
          "category": "vendor_fix",
          "date": "2024-12-17T06:00:00Z",
          "details": "ECOVACS has released firmware version 1.7.5.",
          "product_ids": [
            "CSAFPID-0011"
          ],
          "url": "https://www.ecovacs.com/global/userhelp/dsa20241217001"
        },
        {
          "category": "vendor_fix",
          "date": "2024-12-17T06:00:00Z",
          "details": "ECOVACS has released firmware version 1.9.0.",
          "product_ids": [
            "CSAFPID-0008"
          ],
          "url": "https://www.ecovacs.com/global/userhelp/dsa20241217001"
        },
        {
          "category": "vendor_fix",
          "date": "2024-12-17T06:00:00Z",
          "details": "ECOVACS has released firmware version 1.9.0.",
          "product_ids": [
            "CSAFPID-0009"
          ],
          "url": "https://www.ecovacs.com/global/userhelp/dsa20241217001"
        },
        {
          "category": "vendor_fix",
          "date": "2024-12-17T06:00:00Z",
          "details": "ECOVACS has released firmware version 1.17.0.",
          "product_ids": [
            "CSAFPID-0046"
          ],
          "url": "https://www.ecovacs.com/global/userhelp/dsa20241217001"
        },
        {
          "category": "vendor_fix",
          "date": "2024-12-17T06:00:00Z",
          "details": "ECOVACS has released firmware version 1.17.0.",
          "product_ids": [
            "CSAFPID-0047"
          ],
          "url": "https://www.ecovacs.com/global/userhelp/dsa20241217001"
        },
        {
          "category": "vendor_fix",
          "date": "2024-12-17T06:00:00Z",
          "details": "ECOVACS has released firmware version 1.44.18.",
          "product_ids": [
            "CSAFPID-0060"
          ],
          "url": "https://www.ecovacs.com/global/userhelp/dsa20241217001"
        },
        {
          "category": "vendor_fix",
          "date": "2024-12-17T06:00:00Z",
          "details": "ECOVACS has released firmware version 1.44.18.",
          "product_ids": [
            "CSAFPID-0061"
          ],
          "url": "https://www.ecovacs.com/global/userhelp/dsa20241217001"
        },
        {
          "category": "vendor_fix",
          "date": "2024-12-17T06:00:00Z",
          "details": "ECOVACS has released firmware version 1.76.6.",
          "product_ids": [
            "CSAFPID-0038"
          ],
          "url": "https://www.ecovacs.com/global/userhelp/dsa20241217001"
        },
        {
          "category": "vendor_fix",
          "date": "2024-12-17T06:00:00Z",
          "details": "ECOVACS has released firmware version 1.76.6.",
          "product_ids": [
            "CSAFPID-0039"
          ],
          "url": "https://www.ecovacs.com/global/userhelp/dsa20241217001"
        },
        {
          "category": "vendor_fix",
          "date": "2024-12-17T06:00:00Z",
          "details": "ECOVACS has released firmware version 1.81.10.",
          "product_ids": [
            "CSAFPID-0034"
          ],
          "url": "https://www.ecovacs.com/global/userhelp/dsa20241217001"
        },
        {
          "category": "vendor_fix",
          "date": "2024-12-17T06:00:00Z",
          "details": "ECOVACS has released firmware version 1.81.10.",
          "product_ids": [
            "CSAFPID-0035"
          ],
          "url": "https://www.ecovacs.com/global/userhelp/dsa20241217001"
        },
        {
          "category": "vendor_fix",
          "date": "2024-12-17T06:00:00Z",
          "details": "ECOVACS has released firmware version 2.4.41.",
          "product_ids": [
            "CSAFPID-0022"
          ],
          "url": "https://www.ecovacs.com/global/userhelp/dsa20241217001"
        },
        {
          "category": "vendor_fix",
          "date": "2024-12-17T06:00:00Z",
          "details": "ECOVACS has released firmware version 2.4.41.",
          "product_ids": [
            "CSAFPID-0023"
          ],
          "url": "https://www.ecovacs.com/global/userhelp/dsa20241217001"
        },
        {
          "category": "vendor_fix",
          "date": "2024-12-17T06:00:00Z",
          "details": "ECOVACS has released firmware version 2.4.41.",
          "product_ids": [
            "CSAFPID-0026"
          ],
          "url": "https://www.ecovacs.com/global/userhelp/dsa20241217001"
        },
        {
          "category": "vendor_fix",
          "date": "2024-12-17T06:00:00Z",
          "details": "ECOVACS has released firmware version 2.4.41.",
          "product_ids": [
            "CSAFPID-0027"
          ],
          "url": "https://www.ecovacs.com/global/userhelp/dsa20241217001"
        },
        {
          "category": "vendor_fix",
          "date": "2024-12-17T06:00:00Z",
          "details": "ECOVACS has released firmware version 1.7.3.",
          "product_ids": [
            "CSAFPID-0024"
          ],
          "url": "https://www.ecovacs.com/global/userhelp/dsa20241217001"
        },
        {
          "category": "vendor_fix",
          "date": "2024-12-17T06:00:00Z",
          "details": "ECOVACS has released firmware version 1.7.3.",
          "product_ids": [
            "CSAFPID-0025"
          ],
          "url": "https://www.ecovacs.com/global/userhelp/dsa20241217001"
        },
        {
          "category": "vendor_fix",
          "date": "2024-12-17T06:00:00Z",
          "details": "ECOVACS has released firmware version 1.23.0.",
          "product_ids": [
            "CSAFPID-0030"
          ],
          "url": "https://www.ecovacs.com/global/userhelp/dsa20241217001"
        },
        {
          "category": "vendor_fix",
          "date": "2024-12-17T06:00:00Z",
          "details": "ECOVACS has released firmware version 1.23.0.",
          "product_ids": [
            "CSAFPID-0031"
          ],
          "url": "https://www.ecovacs.com/global/userhelp/dsa20241217001"
        },
        {
          "category": "vendor_fix",
          "date": "2024-12-17T06:00:00Z",
          "details": "ECOVACS has released firmware version 1.10.0.",
          "product_ids": [
            "CSAFPID-0012"
          ],
          "url": "https://www.ecovacs.com/global/userhelp/dsa20241217001"
        },
        {
          "category": "vendor_fix",
          "date": "2024-12-17T06:00:00Z",
          "details": "ECOVACS has released firmware version 1.10.0.",
          "product_ids": [
            "CSAFPID-0013"
          ],
          "url": "https://www.ecovacs.com/global/userhelp/dsa20241217001"
        },
        {
          "category": "vendor_fix",
          "date": "2024-12-17T06:00:00Z",
          "details": "ECOVACS has released firmware version 1.7.5.",
          "product_ids": [
            "CSAFPID-0006"
          ],
          "url": "https://www.ecovacs.com/global/userhelp/dsa20241217001"
        },
        {
          "category": "vendor_fix",
          "date": "2024-12-17T06:00:00Z",
          "details": "ECOVACS has released firmware version 1.7.5.",
          "product_ids": [
            "CSAFPID-0007"
          ],
          "url": "https://www.ecovacs.com/global/userhelp/dsa20241217001"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0045",
            "CSAFPID-0042",
            "CSAFPID-0040",
            "CSAFPID-0037",
            "CSAFPID-0032",
            "CSAFPID-0019",
            "CSAFPID-0029",
            "CSAFPID-0021",
            "CSAFPID-0011",
            "CSAFPID-0008",
            "CSAFPID-0046",
            "CSAFPID-0061",
            "CSAFPID-0039",
            "CSAFPID-0034",
            "CSAFPID-0022",
            "CSAFPID-0027",
            "CSAFPID-0025",
            "CSAFPID-0031",
            "CSAFPID-0013",
            "CSAFPID-0006"
          ]
        }
      ],
      "title": "ECOVACS lawnmowers and vacuums do not properly validate TLS certificates"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Dennis Giese"
          ]
        },
        {
          "names": [
            "Braelynn Luedtke"
          ]
        }
      ],
      "cve": "CVE-2024-52331",
      "cwe": {
        "id": "CWE-494",
        "name": "Download of Code Without Integrity Check"
      },
      "notes": [
        {
          "category": "summary",
          "text": "ECOVACS robot lawnmowers and vacuums use a deterministic symmetric key to decrypt firmware updates. An attacker can create and encrypt malicious firmware that will be successfully decrypted and installed by the robot.",
          "title": "Description"
        },
        {
          "category": "details",
          "text": "SSVCv2/E:P/A:N/T:T/2024-11-22T17:18:33Z/",
          "title": "SSVC"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0062"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "dontvacuum.me",
          "url": "https://dontvacuum.me/talks/HITCON2024/HITCON-CMT-2024_Ecovacs.html"
        },
        {
          "category": "external",
          "summary": "dontvacuum.me",
          "url": "https://dontvacuum.me/talks/37c3-2023/37c3-vacuuming-and-mowing.pdf"
        }
      ],
      "release_date": "2023-12-27T00:00:00Z",
      "remediations": [
        {
          "category": "none_available",
          "details": "Unknown.",
          "product_ids": [
            "CSAFPID-0062"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0062"
          ]
        }
      ],
      "title": "ECOVACS lawnmowers and vacuums deterministic firmware encryption key"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Dennis Giese"
          ]
        },
        {
          "names": [
            "Braelynn Luedtke"
          ]
        }
      ],
      "cve": "CVE-2024-11147",
      "cwe": {
        "id": "CWE-798",
        "name": "Use of Hard-coded Credentials"
      },
      "notes": [
        {
          "category": "summary",
          "text": "ECOVACS robot lawnmowers and vacuums use a deterministic root password generated based on model and serial number. An attacker with shell access can login as root.",
          "title": "Description"
        },
        {
          "category": "details",
          "text": "SSVCv2/E:P/A:N/T:T/2024-11-25T16:55:39Z/",
          "title": "SSVC"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0062"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "dontvacuum.me",
          "url": "https://dontvacuum.me/talks/HITCON2024/HITCON-CMT-2024_Ecovacs.pdf"
        },
        {
          "category": "external",
          "summary": "dontvacuum.me",
          "url": "https://dontvacuum.me/talks/37c3-2023/37c3-vacuuming-and-mowing.pdf"
        },
        {
          "category": "external",
          "summary": "builder.dontvacuum.me",
          "url": "https://builder.dontvacuum.me/ecopassword.php"
        }
      ],
      "release_date": "2023-12-27T00:00:00Z",
      "remediations": [
        {
          "category": "none_available",
          "details": "Unknown.",
          "product_ids": [
            "CSAFPID-0062"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.6,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0062"
          ]
        }
      ],
      "title": "ECOVACS lawnmowers and vacuums deterministic root password"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Dennis Giese"
          ]
        },
        {
          "names": [
            "Braelynn Luedtke"
          ]
        }
      ],
      "cve": "CVE-2024-12078",
      "cwe": {
        "id": "CWE-321",
        "name": "Use of Hard-coded Cryptographic Key"
      },
      "notes": [
        {
          "category": "summary",
          "text": "ECOVACS robot lawn mowers and vacuums use a shared, static secret key to encrypt BLE GATT messages. An unauthenticated attacker within BLE range can control any robot using the same key.",
          "title": "Description"
        },
        {
          "category": "details",
          "text": "SSVCv2/E:P/A:N/T:P/2025-01-23T00:08:15Z/",
          "title": "SSVC"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0062"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "dontvacuum.me",
          "url": "https://dontvacuum.me/talks/37c3-2023/37c3-vacuuming-and-mowing.pdf"
        },
        {
          "category": "external",
          "summary": "youtu.be",
          "url": "https://youtu.be/_wUsM0Mlenc?t=2041"
        }
      ],
      "release_date": "2023-12-27T00:00:00Z",
      "remediations": [
        {
          "category": "none_available",
          "details": "Unknown.",
          "product_ids": [
            "CSAFPID-0062"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0062"
          ]
        }
      ],
      "title": "ECOVACS lawnmowers and vacuums static BLE GATT encryption key"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Dennis Giese"
          ]
        },
        {
          "names": [
            "Braelynn Luedtke"
          ]
        }
      ],
      "cve": "CVE-2024-12079",
      "cwe": {
        "id": "CWE-312",
        "name": "Cleartext Storage of Sensitive Information"
      },
      "notes": [
        {
          "category": "summary",
          "text": "ECOVACS robot lawnmowers store the anti-theft PIN in cleartext on the device filesystem. An attacker can steal a lawnmower, read the PIN, and reset the anti-theft mechanism.",
          "title": "Description"
        },
        {
          "category": "details",
          "text": "SSVCv2/E:P/A:N/T:P/2025-01-23T00:29:20Z/",
          "title": "SSVC"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0062"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "dontvacuum.me",
          "url": "https://dontvacuum.me/talks/37c3-2023/37c3-vacuuming-and-mowing.pdf"
        }
      ],
      "release_date": "2023-12-27T00:00:00Z",
      "remediations": [
        {
          "category": "none_available",
          "details": "Unknown.",
          "product_ids": [
            "CSAFPID-0062"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0062"
          ]
        }
      ],
      "title": "ECOVACS lawnmowers cleartext storage of anti-theft PIN"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Dennis Giese"
          ]
        },
        {
          "names": [
            "Braelynn Luedtke"
          ]
        }
      ],
      "cve": "CVE-2024-52327",
      "cwe": {
        "id": "CWE-603",
        "name": "Use of Client-Side Authentication"
      },
      "notes": [
        {
          "category": "summary",
          "text": "The cloud service used by ECOVACS robot lawnmowers and vacuums allows authenticated attackers to bypass the PIN entry required to access the live video feed.",
          "title": "Description"
        },
        {
          "category": "details",
          "text": "SSVCv2/E:P/A:N/T:P/2025-01-15T20:26:52Z/",
          "title": "SSVC"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-0051",
          "CSAFPID-0003"
        ],
        "known_affected": [
          "CSAFPID-0050",
          "CSAFPID-0002"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "dontvacuum.me",
          "url": "https://dontvacuum.me/talks/HITCON2024/HITCON-CMT-2024_Ecovacs.pdf"
        },
        {
          "category": "external",
          "summary": "dontvacuum.me",
          "url": "https://dontvacuum.me/talks/37c3-2023/37c3-vacuuming-and-mowing.pdf"
        },
        {
          "category": "external",
          "summary": "www.ecovacs.com",
          "url": "https://www.ecovacs.com/global/userhelp/dsa20241217002"
        }
      ],
      "release_date": "2023-12-27T00:00:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-12-17T06:00:00Z",
          "details": "ECOVACS updated the cloud service and ECOVACS HOME mobile apps.",
          "product_ids": [
            "CSAFPID-0050"
          ],
          "url": "https://www.ecovacs.com/global/userhelp/dsa20241217002"
        },
        {
          "category": "vendor_fix",
          "date": "2024-12-17T06:00:00Z",
          "details": "ECOVACS updated the cloud service and ECOVACS HOME mobile apps.",
          "product_ids": [
            "CSAFPID-0051"
          ],
          "url": "https://www.ecovacs.com/global/userhelp/dsa20241217002"
        },
        {
          "category": "vendor_fix",
          "date": "2024-12-17T06:00:00Z",
          "details": "ECOVACS updated the cloud service and ECOVACS HOME mobile apps.",
          "product_ids": [
            "CSAFPID-0002"
          ],
          "url": "https://www.ecovacs.com/global/userhelp/dsa20241217002"
        },
        {
          "category": "vendor_fix",
          "date": "2024-12-17T06:00:00Z",
          "details": "ECOVACS updated the cloud service and ECOVACS HOME mobile apps.",
          "product_ids": [
            "CSAFPID-0003"
          ],
          "url": "https://www.ecovacs.com/global/userhelp/dsa20241217002"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0050",
            "CSAFPID-0002"
          ]
        }
      ],
      "title": "ECOVACS lawnmower and vacuum cloud service live video PIN bypass"
    }
  ]
}

fkie_cve-2024-11147

Vulnerability from fkie_nvd

Published

2025-01-23 17:15

Modified

2025-09-23 17:44

Severity ?

7.6 (High) - CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Summary

ECOVACS robot lawnmowers and vacuums use a deterministic root password generated based on model and serial number. An attacker with shell access can login as root.

References

URL	Tags
9119a7d8-5eab-497f-8521-727c672e3725	https://builder.dontvacuum.me/ecopassword.php	Product
9119a7d8-5eab-497f-8521-727c672e3725	https://dontvacuum.me/talks/37c3-2023/37c3-vacuuming-and-mowing.pdf	Exploit, Third Party Advisory
9119a7d8-5eab-497f-8521-727c672e3725	https://dontvacuum.me/talks/HITCON2024/HITCON-CMT-2024_Ecovacs.pdf	Exploit, Third Party Advisory

Impacted products

Vendor	Product	Version
ecovacs	deebot_900_firmware	-
ecovacs	deebot_900	-
ecovacs	deebot_n8_firmware	-
ecovacs	deebot_n8	-
ecovacs	deebot_t8_firmware	-
ecovacs	deebot_t8	-
ecovacs	deebot_n9_firmware	-
ecovacs	deebot_n9	-
ecovacs	deebot_t9_firmware	-
ecovacs	deebot_t9	-
ecovacs	deebot_n10_firmware	-
ecovacs	deebot_n10	-
ecovacs	deebot_t10_firmware	-
ecovacs	deebot_t10	-
ecovacs	deebot_x1_firmware	-
ecovacs	deebot_x1	-
ecovacs	deebot_t20_firmware	-
ecovacs	deebot_t20	-
ecovacs	deebot_x2_firmware	-
ecovacs	deebot_x2	-
ecovacs	goat_g1_firmware	-
ecovacs	goat_g1	-
ecovacs	airbot_z1_firmware	-
ecovacs	airbot_z1	-
ecovacs	airbot_ava_firmware	-
ecovacs	airbot_ava	-
ecovacs	airbot_andy_firmware	-
ecovacs	airbot_andy	-

JSON

To clipboard

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:ecovacs:deebot_900_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "5004D440-E3EE-4252-831B-7396887BA117",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:ecovacs:deebot_900:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "0C4E3255-6E5D-46FC-8DE0-462788F1B4FD",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:ecovacs:deebot_n8_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "ACB3D3DB-AFB6-4B36-B86D-358BE11FAE3E",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:ecovacs:deebot_n8:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "ED77EFA6-576C-411A-91D2-22C962C30C94",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:ecovacs:deebot_t8_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "AC59B209-998B-43A6-875D-364844CA37C7",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:ecovacs:deebot_t8:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "8BA30BA8-4069-4525-A843-E88EFDC720DF",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:ecovacs:deebot_n9_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "43C72C62-49C3-49BE-A9F1-3572DA18647C",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:ecovacs:deebot_n9:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "7A663879-36BF-433D-9D7A-B62D65A5C6C9",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:ecovacs:deebot_t9_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "D16EB997-ADC3-45AA-8E92-6F1371E85A35",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:ecovacs:deebot_t9:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "D63E5FF5-9A27-4674-B573-6929CAB3BB01",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:ecovacs:deebot_n10_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "F7060D3C-5F7C-4324-987D-C6EB4204CC47",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:ecovacs:deebot_n10:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "DCC67BB7-0E4A-47FA-A04D-41837A18E103",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:ecovacs:deebot_t10_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "C7422285-BB34-4D85-A4A4-ADD006401FE7",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:ecovacs:deebot_t10:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "318C962D-54C2-456E-A045-1332A02958E9",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:ecovacs:deebot_x1_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "A5248299-76EB-41DB-A036-5685F20D2A18",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:ecovacs:deebot_x1:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "4DA0B484-221F-4E67-927F-DBCBBC1F6448",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:ecovacs:deebot_t20_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "D1DE7CE5-6D8F-478B-AA9A-274AA74270AE",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:ecovacs:deebot_t20:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "48123BA8-E8D5-4AEF-A4CF-8136AFA400F4",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:ecovacs:deebot_x2_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "3B39C403-6D28-41E3-A2D0-79473D6B9733",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:ecovacs:deebot_x2:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "3FD5AC03-3EF9-485F-B17A-E6D9D759A844",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:ecovacs:goat_g1_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "F1AA1C6D-E86C-46B6-AA32-FB9B34D60F1D",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:ecovacs:goat_g1:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "75B2D398-870D-408F-817D-FDEE8C93D683",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:ecovacs:airbot_z1_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "FE2F668D-DD5C-4E70-A677-5029C25AB65E",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:ecovacs:airbot_z1:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "28431C96-C4CF-4029-BBD0-1B364C406D86",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:ecovacs:airbot_ava_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "BA924895-0CE8-453A-98E0-0942AA33BECE",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:ecovacs:airbot_ava:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "C193E51C-F9DD-43FD-913D-742513E63C61",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:ecovacs:airbot_andy_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "1E42AEAD-D52A-45E6-97FE-A6C8FE5C59BC",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:ecovacs:airbot_andy:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "E5752722-3EC7-401D-A114-ACA4662890BA",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "ECOVACS robot lawnmowers and vacuums use a deterministic root password generated based on model and serial number. An attacker with shell access can login as root."
    },
    {
      "lang": "es",
      "value": "Los robots cortac\u00e9sped y aspiradores ECOVACS utilizan una contrase\u00f1a ra\u00edz determinista generada en funci\u00f3n del modelo y el n\u00famero de serie. Un atacante con acceso de shell puede iniciar sesi\u00f3n como superusuario."
    }
  ],
  "id": "CVE-2024-11147",
  "lastModified": "2025-09-23T17:44:13.273",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "PHYSICAL",
          "availabilityImpact": "HIGH",
          "baseScore": 7.6,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "CHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 0.9,
        "impactScore": 6.0,
        "source": "9119a7d8-5eab-497f-8521-727c672e3725",
        "type": "Secondary"
      }
    ],
    "cvssMetricV40": [
      {
        "cvssData": {
          "Automatable": "NOT_DEFINED",
          "Recovery": "NOT_DEFINED",
          "Safety": "NOT_DEFINED",
          "attackComplexity": "LOW",
          "attackRequirements": "NONE",
          "attackVector": "PHYSICAL",
          "availabilityRequirement": "NOT_DEFINED",
          "baseScore": 7.0,
          "baseSeverity": "HIGH",
          "confidentialityRequirement": "NOT_DEFINED",
          "exploitMaturity": "NOT_DEFINED",
          "integrityRequirement": "NOT_DEFINED",
          "modifiedAttackComplexity": "NOT_DEFINED",
          "modifiedAttackRequirements": "NOT_DEFINED",
          "modifiedAttackVector": "NOT_DEFINED",
          "modifiedPrivilegesRequired": "NOT_DEFINED",
          "modifiedSubAvailabilityImpact": "NOT_DEFINED",
          "modifiedSubConfidentialityImpact": "NOT_DEFINED",
          "modifiedSubIntegrityImpact": "NOT_DEFINED",
          "modifiedUserInteraction": "NOT_DEFINED",
          "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
          "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
          "modifiedVulnIntegrityImpact": "NOT_DEFINED",
          "privilegesRequired": "NONE",
          "providerUrgency": "NOT_DEFINED",
          "subAvailabilityImpact": "NONE",
          "subConfidentialityImpact": "NONE",
          "subIntegrityImpact": "NONE",
          "userInteraction": "NONE",
          "valueDensity": "NOT_DEFINED",
          "vectorString": "CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
          "version": "4.0",
          "vulnAvailabilityImpact": "HIGH",
          "vulnConfidentialityImpact": "HIGH",
          "vulnIntegrityImpact": "HIGH",
          "vulnerabilityResponseEffort": "NOT_DEFINED"
        },
        "source": "9119a7d8-5eab-497f-8521-727c672e3725",
        "type": "Secondary"
      }
    ]
  },
  "published": "2025-01-23T17:15:12.860",
  "references": [
    {
      "source": "9119a7d8-5eab-497f-8521-727c672e3725",
      "tags": [
        "Product"
      ],
      "url": "https://builder.dontvacuum.me/ecopassword.php"
    },
    {
      "source": "9119a7d8-5eab-497f-8521-727c672e3725",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "url": "https://dontvacuum.me/talks/37c3-2023/37c3-vacuuming-and-mowing.pdf"
    },
    {
      "source": "9119a7d8-5eab-497f-8521-727c672e3725",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "url": "https://dontvacuum.me/talks/HITCON2024/HITCON-CMT-2024_Ecovacs.pdf"
    }
  ],
  "sourceIdentifier": "9119a7d8-5eab-497f-8521-727c672e3725",
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-798"
        }
      ],
      "source": "9119a7d8-5eab-497f-8521-727c672e3725",
      "type": "Secondary"
    }
  ]
}

ghsa-w3jw-m3f7-54qm

Vulnerability from github

Published

2025-01-23 18:31

Modified

2025-01-23 18:31

Severity ?

7.6 (High) - CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
7.0 (High) - CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Details

ECOVACS robot lawnmowers and vacuums use a deterministic root password generated based on model and serial number. An attacker with shell access can login as root.

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2024-11147"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-798"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2025-01-23T17:15:12Z",
    "severity": "HIGH"
  },
  "details": "ECOVACS robot lawnmowers and vacuums use a deterministic root password generated based on model and serial number. An attacker with shell access can login as root.",
  "id": "GHSA-w3jw-m3f7-54qm",
  "modified": "2025-01-23T18:31:20Z",
  "published": "2025-01-23T18:31:20Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-11147"
    },
    {
      "type": "WEB",
      "url": "https://builder.dontvacuum.me/ecopassword.php"
    },
    {
      "type": "WEB",
      "url": "https://dontvacuum.me/talks/37c3-2023/37c3-vacuuming-and-mowing.pdf"
    },
    {
      "type": "WEB",
      "url": "https://dontvacuum.me/talks/HITCON2024/HITCON-CMT-2024_Ecovacs.pdf"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
      "type": "CVSS_V3"
    },
    {
      "score": "CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
      "type": "CVSS_V4"
    }
  ]
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

CVE-2024-11147 (GCVE-0-2024-11147)

Vulnerability from cvelistv5

va-25-022-01

Vulnerability from csaf_cisa

fkie_cve-2024-11147

Vulnerability from fkie_nvd

ghsa-w3jw-m3f7-54qm

Vulnerability from github

Tags

Sightings

Nomenclature