Skip to content
OpenAdvisories

Product · ECOVACS

Unspecified robots

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.6
    CVE-2024-11147

    ECOVACS lawnmowers and vacuums deterministic root password

    ECOVACS robot lawnmowers and vacuums use a deterministic root password generated based on model and serial number. An attacker with shell access can login as root.

    ECOVACS Unspecified robots
  • High 7.5
    CVE-2024-52331

    ECOVACS lawnmowers and vacuums deterministic firmware encryption key

    ECOVACS robot lawnmowers and vacuums use a deterministic symmetric key to decrypt firmware updates. An attacker can create and encrypt malicious firmware that will be successfully decrypted and installed by the robot.

    ECOVACS Unspecified robots