Advisories · Technology

ECOVACS Unspecified robots.

Every CVE that names ECOVACS Unspecified robots among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-12079 CVE record

CVSS 4.8 Medium

ECOVACS lawnmowers cleartext storage of anti-theft PIN
- ECOVACS Unspecified robots
- Information disclosure
Not analysed yet 23 Jan 2025
CVE-2024-12078 CVE record

CVSS 5.3 Medium

ECOVACS lawnmowers and vacuums static BLE GATT encryption key
- ECOVACS Unspecified robots
- Hard-coded credentials
Not analysed yet 23 Jan 2025
CVE-2024-11147 CVE record

CVSS 7.0 High

ECOVACS lawnmowers and vacuums deterministic root password
- ECOVACS Unspecified robots
- Hard-coded credentials
Not analysed yet 23 Jan 2025
CVE-2024-52331 CVE record

CVSS 7.7 High

ECOVACS lawnmowers and vacuums deterministic firmware encryption key
- ECOVACS Unspecified robots
- Weak cryptography or TLS
- Hard-coded credentials
Not analysed yet 23 Jan 2025
CVE-2024-52328 CVE record

CVSS 1.8 Low

ECOVACS lawnmowers and vacuums insecurely store audio warning files
- ECOVACS Unspecified robots
- Broken access control
Not analysed yet 23 Jan 2025