{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-05-08T15:53:47.399","vulnerabilities":[{"cve":{"id":"CVE-2024-52330","sourceIdentifier":"9119a7d8-5eab-497f-8521-727c672e3725","published":"2025-01-23T17:15:14.427","lastModified":"2025-09-23T17:48:33.127","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"ECOVACS lawnmowers and vacuums do not properly validate TLS certificates. An unauthenticated attacker can read or modify TLS traffic, possibly modifying firmware updates."},{"lang":"es","value":"Las cortadoras de césped y las aspiradoras ECOVACS no validan correctamente los certificados TLS. Un atacante no autenticado puede leer o modificar el tráfico TLS, posiblemente modificando las actualizaciones de firmware."}],"metrics":{"cvssMetricV40":[{"source":"9119a7d8-5eab-497f-8521-727c672e3725","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":9.5,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","subIntegrityImpact":"HIGH","subAvailabilityImpact":"HIGH","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"9119a7d8-5eab-497f-8521-727c672e3725","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","baseScore":7.4,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":5.2}]},"weaknesses":[{"source":"9119a7d8-5eab-497f-8521-727c672e3725","type":"Secondary","description":[{"lang":"en","value":"CWE-295"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_x2_omni_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.76.6","matchCriteriaId":"DFBAD9FC-1343-4D07-99E6-9E7C3D77C694"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_x2_omni:-:*:*:*:*:*:*:*","matchCriteriaId":"9BD94283-0BC1-4C7C-A5F3-9D57E44B4C64"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_x2_combo_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.81.10","matchCriteriaId":"DAF98AFD-C399-4AB8-A637-29561F39F134"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_x2_combo:-:*:*:*:*:*:*:*","matchCriteriaId":"2C12633C-1BD2-4BF6-BF11-FC05221B93EB"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_x2s_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.49.0","matchCriteriaId":"969D4A03-B499-4218-BF07-22E51654AA6C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_x2s:-:*:*:*:*:*:*:*","matchCriteriaId":"11AA1D51-EE29-4252-A739-1F1D4A3F428D"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_x5_pro_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.70.0","matchCriteriaId":"5B819C9B-F143-4A63-825C-B1DF1DCB16B7"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_x5_pro:-:*:*:*:*:*:*:*","matchCriteriaId":"64AB781B-CB28-4229-A74D-8CDD325EFAC3"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_x5_pro_plus_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.38.0","matchCriteriaId":"0F61F40B-6031-4C32-9571-B92C3377EFB2"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_x5_pro_plus:-:*:*:*:*:*:*:*","matchCriteriaId":"CFE49BE7-59E8-4447-B78B-4FEDF4F773CD"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_x5_pro_ultra_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.17.0","matchCriteriaId":"9C4821F3-3B7D-4035-980F-C11713C5D424"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_x5_pro_ultra:-:*:*:*:*:*:*:*","matchCriteriaId":"8504979A-A4F0-4A03-8816-E9AB3BD6F40B"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:mate_x_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.44.18","matchCriteriaId":"0C4EC5E7-04E3-497C-ACD9-2479C48A2FC4"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:mate_x:-:*:*:*:*:*:*:*","matchCriteriaId":"706F2C75-0E75-487B-BA24-EB824E6BC16B"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_x1_omni_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"2.4.41","matchCriteriaId":"8F75A470-5B86-41C6-86E2-232656AF68F9"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_x1_omni:-:*:*:*:*:*:*:*","matchCriteriaId":"91E23E30-45BE-4142-8E9C-032282F3B6A6"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_x1_turbo_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"2.4.41","matchCriteriaId":"0F868AC3-7B87-44E5-A7B0-F2C85DCA7E7C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_x1_turbo:-:*:*:*:*:*:*:*","matchCriteriaId":"65F69609-1D21-461A-9457-A745194759CD"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_x1_pro_omni_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"2.4.41","matchCriteriaId":"2B044584-55B4-4E88-99C9-9A48D9B4E908"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_x1_pro_omni:-:*:*:*:*:*:*:*","matchCriteriaId":"003B54E0-B2FF-485A-9A55-925609EE8DF1"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_x1_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.7.3","matchCriteriaId":"4AE87B2E-A1B1-438E-9482-E8466647050B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_x1:-:*:*:*:*:*:*:*","matchCriteriaId":"4DA0B484-221F-4E67-927F-DBCBBC1F6448"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_x1_plus_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.7.3","matchCriteriaId":"7DC2AA81-5895-43EE-8B34-D8074DDD301F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_x1_plus:-:*:*:*:*:*:*:*","matchCriteriaId":"C5586D60-D87F-45A1-8619-F6CC12AD9731"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_x1s_pro_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"2.5.31","matchCriteriaId":"849A58E5-2700-49F4-BF60-C35E97689AE1"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_x1s_pro:-:*:*:*:*:*:*:*","matchCriteriaId":"037628A9-DD54-4A4B-97A9-78142B76E91E"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_x1s_pro_plus_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.23.0","matchCriteriaId":"7526B614-1962-490C-8972-2A275A471A86"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_x1s_pro_plus:-:*:*:*:*:*:*:*","matchCriteriaId":"4612A790-C3CC-40AA-8E31-2C2918C6AB6C"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_x1e_omni_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"2.4.42","matchCriteriaId":"67C721A5-53B6-4B15-A76C-481EF4C45147"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_x1e_omni:-:*:*:*:*:*:*:*","matchCriteriaId":"16705AA3-4CAE-4BF5-8084-6A6CB30A1E8C"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_t10_turbo_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.10.0","matchCriteriaId":"454C233D-82D5-4B99-AC3A-94B1CF23F078"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_t10_turbo:-:*:*:*:*:*:*:*","matchCriteriaId":"85DEFE0B-99F7-49DF-96E3-69B6FC1EF262"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_t10_plus_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.7.5","matchCriteriaId":"79E44970-1ADF-4170-A09A-F64F02E27C64"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_t10_plus:-:*:*:*:*:*:*:*","matchCriteriaId":"1CBAA124-1B4C-4E75-80E1-A747AC9183E1"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_t10_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.7.5","matchCriteriaId":"4CA98740-BA9B-4479-B92F-F76B1234D2FE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_t10:-:*:*:*:*:*:*:*","matchCriteriaId":"318C962D-54C2-456E-A045-1332A02958E9"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_t10_omni_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.9.0","matchCriteriaId":"B843C490-26E9-4D03-8BCB-DBC462833D12"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_t10_omni:-:*:*:*:*:*:*:*","matchCriteriaId":"11395F70-87C2-41DD-9D9A-CFA8D0512ECE"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_x2_pro_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.76.6","matchCriteriaId":"F3F737D6-74BD-47F8-88B7-045E8B280E46"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_x2_pro:-:*:*:*:*:*:*:*","matchCriteriaId":"C98FE3FD-E432-4DD7-AF87-6FBA4C4ABC45"}]}]}],"references":[{"url":"https://dontvacuum.me/talks/37c3-2023/37c3-vacuuming-and-mowing.pdf","source":"9119a7d8-5eab-497f-8521-727c672e3725","tags":["Exploit","Third Party Advisory"]},{"url":"https://dontvacuum.me/talks/HITCON2024/HITCON-CMT-2024_Ecovacs.pdf","source":"9119a7d8-5eab-497f-8521-727c672e3725","tags":["Exploit","Third Party Advisory"]},{"url":"https://www.ecovacs.com/global/userhelp/dsa20241217001","source":"9119a7d8-5eab-497f-8521-727c672e3725","tags":["Vendor Advisory"]}]}}]}