Skip to content
OpenAdvisories

Vendor

ECOVACS

13 known vulnerabilities.

2 results · Clear filters · Feed

  • Low 3.3

    ECOVACS lawnmowers cleartext storage of anti-theft PIN

    ECOVACS robot lawnmowers store the anti-theft PIN in cleartext on the device filesystem. An attacker can steal a lawnmower, read the PIN, and reset the anti-theft mechanism.

  • Low 2.3

    ECOVACS lawnmowers and vacuums insecurely store audio warning files

    ECOVACS robot lawnmowers and vacuums insecurely store audio files used to indicate that the camera is on. An attacker with access to the /data filesystem can delete or modify warning files such that users may not be aware that the camera is on.