{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-05-11T11:44:55.634","vulnerabilities":[{"cve":{"id":"CVE-2024-52325","sourceIdentifier":"9119a7d8-5eab-497f-8521-727c672e3725","published":"2025-01-23T16:15:35.943","lastModified":"2025-09-23T17:35:35.463","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"ECOVACS robot lawnmowers and vacuums are vulnerable to command injection via SetNetPin() over an unauthenticated BLE connection."},{"lang":"es","value":"Los robots cortacésped y aspiradores ECOVACS son vulnerables a la inyección de comandos a través de SetNetPin() en una conexión BLE no autenticada."}],"metrics":{"cvssMetricV40":[{"source":"9119a7d8-5eab-497f-8521-727c672e3725","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":5.8,"baseSeverity":"MEDIUM","attackVector":"ADJACENT","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","subIntegrityImpact":"HIGH","subAvailabilityImpact":"HIGH","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"9119a7d8-5eab-497f-8521-727c672e3725","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","baseScore":9.6,"baseSeverity":"CRITICAL","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":6.0}]},"weaknesses":[{"source":"9119a7d8-5eab-497f-8521-727c672e3725","type":"Secondary","description":[{"lang":"en","value":"CWE-77"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:goat_g1-2000_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.36.187","matchCriteriaId":"7B5B36B7-4C8D-4E8D-8B51-1628F3330D1C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:goat_g1-2000:-:*:*:*:*:*:*:*","matchCriteriaId":"61AB63A0-18C2-4B8B-8315-C5CA598FCAE5"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:goat_g1_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.36.187","matchCriteriaId":"DC51551A-F434-4D50-A700-8A65C41BD5B1"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:goat_g1:-:*:*:*:*:*:*:*","matchCriteriaId":"75B2D398-870D-408F-817D-FDEE8C93D683"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:goat_g1-800_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.36.187","matchCriteriaId":"EC6F6F05-7D54-4C27-8785-1FB67D826C35"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:goat_g1-800:-:*:*:*:*:*:*:*","matchCriteriaId":"DE264ABA-5F6A-43D4-85DC-6D480D3AE9A3"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:gx-600_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.2.120","matchCriteriaId":"ECDACFD6-592A-4AA0-9943-64AA8D12E3EE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:gx-600:-:*:*:*:*:*:*:*","matchCriteriaId":"DE0918D2-0708-464F-B983-E57B523E33A0"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_x2_omni_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.76.6","matchCriteriaId":"DFBAD9FC-1343-4D07-99E6-9E7C3D77C694"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_x2_omni:-:*:*:*:*:*:*:*","matchCriteriaId":"9BD94283-0BC1-4C7C-A5F3-9D57E44B4C64"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_x2_combo_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.81.10","matchCriteriaId":"DAF98AFD-C399-4AB8-A637-29561F39F134"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_x2_combo:-:*:*:*:*:*:*:*","matchCriteriaId":"2C12633C-1BD2-4BF6-BF11-FC05221B93EB"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_x2s_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.49.0","matchCriteriaId":"969D4A03-B499-4218-BF07-22E51654AA6C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_x2s:-:*:*:*:*:*:*:*","matchCriteriaId":"11AA1D51-EE29-4252-A739-1F1D4A3F428D"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_x5_pro_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.70.0","matchCriteriaId":"5B819C9B-F143-4A63-825C-B1DF1DCB16B7"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_x5_pro:-:*:*:*:*:*:*:*","matchCriteriaId":"64AB781B-CB28-4229-A74D-8CDD325EFAC3"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_x5_pro_plus_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.38.0","matchCriteriaId":"0F61F40B-6031-4C32-9571-B92C3377EFB2"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_x5_pro_plus:-:*:*:*:*:*:*:*","matchCriteriaId":"CFE49BE7-59E8-4447-B78B-4FEDF4F773CD"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_x5_pro_ultra_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.17.0","matchCriteriaId":"9C4821F3-3B7D-4035-980F-C11713C5D424"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_x5_pro_ultra:-:*:*:*:*:*:*:*","matchCriteriaId":"8504979A-A4F0-4A03-8816-E9AB3BD6F40B"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_t30_omni_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.93.0","matchCriteriaId":"E405CE55-CDCC-4867-A0CC-84F8ACE56FD7"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_t30_omni:-:*:*:*:*:*:*:*","matchCriteriaId":"5B4D1A83-F00F-4F66-88DF-67C9FD036016"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_t30s_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.95.0","matchCriteriaId":"0A78434E-A69A-44CB-9B2C-239C060A8789"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_t30s:-:*:*:*:*:*:*:*","matchCriteriaId":"EAC6EDB9-24EE-4113-B3D6-90CA18590BA9"}]}]}],"references":[{"url":"https://dontvacuum.me/talks/DEFCON32/DEFCON32_reveng_hacking_ecovacs_robots.pdf","source":"9119a7d8-5eab-497f-8521-727c672e3725","tags":["Exploit","Third Party Advisory"]},{"url":"https://www.ecovacs.com/global/userhelp/dsa20241119","source":"9119a7d8-5eab-497f-8521-727c672e3725","tags":["Vendor Advisory"]},{"url":"https://www.ecovacs.com/global/userhelp/dsa20241130001","source":"9119a7d8-5eab-497f-8521-727c672e3725","tags":["Vendor Advisory"]},{"url":"https://youtu.be/_wUsM0Mlenc?t=2041","source":"9119a7d8-5eab-497f-8521-727c672e3725","tags":["Exploit"]}]}}]}