{"resultsPerPage":16,"startIndex":0,"totalResults":16,"format":"NVD_CVE","version":"2.0","timestamp":"2026-10-11T21:50:43.378","vulnerabilities":[{"cve":{"id":"CVE-2024-42911","sourceIdentifier":"cve@mitre.org","published":"2025-01-14T23:15:07.297","lastModified":"2026-07-05T01:20:21.593","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ECOVACS Robotics Deebot T20 OMNI and T20e OMNI before 1.24.0 was discovered to contain a WiFi Remote Code Execution vulnerability."},{"lang":"es","value":" Se descubrió que ECOVACS Robotics Deebot T20 OMNI y T20e OMNI anteriores a la versión 1.24.0 contenían una vulnerabilidad de ejecución remota de código WiFi."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","baseScore":7.4,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":5.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-01-16T14:08:18.038004Z","id":"CVE-2024-42911","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-94"}]}],"references":[{"url":"https://www.ecovacs.com/global/userhelp/dsa20250113001","source":"cve@mitre.org"}]}},{"cve":{"id":"CVE-2024-52325","sourceIdentifier":"9119a7d8-5eab-497f-8521-727c672e3725","published":"2025-01-23T16:15:35.943","lastModified":"2026-06-17T08:07:01.197","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"ECOVACS robot lawnmowers and vacuums are vulnerable to command injection via SetNetPin() over an unauthenticated BLE connection."},{"lang":"es","value":"Los robots cortacésped y aspiradores ECOVACS son vulnerables a la inyección de comandos a través de SetNetPin() en una conexión BLE no autenticada."}],"affected":[{"source":"9119a7d8-5eab-497f-8521-727c672e3725","affectedData":[{"vendor":"ECOVACS","product":"GOAT G1","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"1.36.187","versionType":"custom","status":"affected"},{"version":"1.36.187","status":"unaffected"}]},{"vendor":"ECOVACS","product":"GOAT G1-800","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"1.36.187","versionType":"custom","status":"affected"},{"version":"1.36.187","status":"unaffected"}]},{"vendor":"ECOVACS","product":"DEEBOT X2S","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"1.49.0","versionType":"custom","status":"affected"},{"version":"1.49.0","status":"unaffected"}]},{"vendor":"ECOVACS","product":"DEEBOT X5 PRO","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"1.70.0","versionType":"custom","status":"affected"},{"version":"1.70.0","status":"unaffected"}]},{"vendor":"ECOVACS","product":"DEEBOT X5 PRO PLUS","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"1.38.0","versionType":"custom","status":"affected"},{"version":"1.38.0","status":"unaffected"}]},{"vendor":"ECOVACS","product":"DEEBOT T30 OMNI","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"1.93.0","versionType":"custom","status":"affected"},{"version":"1.93.0","status":"unaffected"}]},{"vendor":"ECOVACS","product":"DEEBOT T30S","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"1.95.0","versionType":"custom","status":"affected"},{"version":"1.95.0","status":"unaffected"}]},{"vendor":"ECOVACS","product":"GOAT G1-2000","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"1.36.187","versionType":"custom","status":"affected"},{"version":"1.36.187","status":"unaffected"}]},{"vendor":"ECOVACS","product":"GOAT GX-600","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"1.2.120","versionType":"custom","status":"affected"},{"version":"1.2.120","status":"unaffected"}]},{"vendor":"ECOVACS","product":"DEEBOT X2  OMNI","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"1.76.6","versionType":"custom","status":"affected"},{"version":"1.76.6","status":"unaffected"}]},{"vendor":"ECOVACS","product":"DEEBOT X2 COMBO","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"1.81.10","versionType":"custom","status":"affected"},{"version":"1.81.10","status":"unaffected"}]},{"vendor":"ECOVACS","product":"DEEBOT X5 PRO ULTRA","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"1.17.0","versionType":"custom","status":"affected"},{"version":"1.17.0","status":"unaffected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"9119a7d8-5eab-497f-8521-727c672e3725","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":5.8,"baseSeverity":"MEDIUM","attackVector":"ADJACENT","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","subIntegrityImpact":"HIGH","subAvailabilityImpact":"HIGH","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"9119a7d8-5eab-497f-8521-727c672e3725","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","baseScore":9.6,"baseSeverity":"CRITICAL","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":6.0}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-01-23T16:11:52.931430Z","id":"CVE-2024-52325","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"9119a7d8-5eab-497f-8521-727c672e3725","type":"Secondary","description":[{"lang":"en","value":"CWE-77"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:goat_g1-2000_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.36.187","matchCriteriaId":"7B5B36B7-4C8D-4E8D-8B51-1628F3330D1C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:goat_g1-2000:-:*:*:*:*:*:*:*","matchCriteriaId":"61AB63A0-18C2-4B8B-8315-C5CA598FCAE5"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:goat_g1_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.36.187","matchCriteriaId":"DC51551A-F434-4D50-A700-8A65C41BD5B1"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:goat_g1:-:*:*:*:*:*:*:*","matchCriteriaId":"75B2D398-870D-408F-817D-FDEE8C93D683"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:goat_g1-800_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.36.187","matchCriteriaId":"EC6F6F05-7D54-4C27-8785-1FB67D826C35"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:goat_g1-800:-:*:*:*:*:*:*:*","matchCriteriaId":"DE264ABA-5F6A-43D4-85DC-6D480D3AE9A3"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:gx-600_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.2.120","matchCriteriaId":"ECDACFD6-592A-4AA0-9943-64AA8D12E3EE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:gx-600:-:*:*:*:*:*:*:*","matchCriteriaId":"DE0918D2-0708-464F-B983-E57B523E33A0"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_x2_omni_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.76.6","matchCriteriaId":"DFBAD9FC-1343-4D07-99E6-9E7C3D77C694"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_x2_omni:-:*:*:*:*:*:*:*","matchCriteriaId":"9BD94283-0BC1-4C7C-A5F3-9D57E44B4C64"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_x2_combo_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.81.10","matchCriteriaId":"DAF98AFD-C399-4AB8-A637-29561F39F134"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_x2_combo:-:*:*:*:*:*:*:*","matchCriteriaId":"2C12633C-1BD2-4BF6-BF11-FC05221B93EB"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_x2s_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.49.0","matchCriteriaId":"969D4A03-B499-4218-BF07-22E51654AA6C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_x2s:-:*:*:*:*:*:*:*","matchCriteriaId":"11AA1D51-EE29-4252-A739-1F1D4A3F428D"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_x5_pro_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.70.0","matchCriteriaId":"5B819C9B-F143-4A63-825C-B1DF1DCB16B7"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_x5_pro:-:*:*:*:*:*:*:*","matchCriteriaId":"64AB781B-CB28-4229-A74D-8CDD325EFAC3"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_x5_pro_plus_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.38.0","matchCriteriaId":"0F61F40B-6031-4C32-9571-B92C3377EFB2"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_x5_pro_plus:-:*:*:*:*:*:*:*","matchCriteriaId":"CFE49BE7-59E8-4447-B78B-4FEDF4F773CD"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_x5_pro_ultra_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.17.0","matchCriteriaId":"9C4821F3-3B7D-4035-980F-C11713C5D424"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_x5_pro_ultra:-:*:*:*:*:*:*:*","matchCriteriaId":"8504979A-A4F0-4A03-8816-E9AB3BD6F40B"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_t30_omni_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.93.0","matchCriteriaId":"E405CE55-CDCC-4867-A0CC-84F8ACE56FD7"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_t30_omni:-:*:*:*:*:*:*:*","matchCriteriaId":"5B4D1A83-F00F-4F66-88DF-67C9FD036016"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_t30s_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.95.0","matchCriteriaId":"0A78434E-A69A-44CB-9B2C-239C060A8789"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_t30s:-:*:*:*:*:*:*:*","matchCriteriaId":"EAC6EDB9-24EE-4113-B3D6-90CA18590BA9"}]}]}],"references":[{"url":"https://dontvacuum.me/talks/DEFCON32/DEFCON32_reveng_hacking_ecovacs_robots.pdf","source":"9119a7d8-5eab-497f-8521-727c672e3725","tags":["Exploit","Third Party Advisory"]},{"url":"https://www.ecovacs.com/global/userhelp/dsa20241119","source":"9119a7d8-5eab-497f-8521-727c672e3725","tags":["Vendor Advisory"]},{"url":"https://www.ecovacs.com/global/userhelp/dsa20241130001","source":"9119a7d8-5eab-497f-8521-727c672e3725","tags":["Vendor Advisory"]},{"url":"https://youtu.be/_wUsM0Mlenc?t=2041","source":"9119a7d8-5eab-497f-8521-727c672e3725","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2024-11147","sourceIdentifier":"9119a7d8-5eab-497f-8521-727c672e3725","published":"2025-01-23T17:15:12.860","lastModified":"2026-06-17T06:57:10.110","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"ECOVACS robot lawnmowers and vacuums use a deterministic root password generated based on model and serial number. An attacker with shell access can login as root."},{"lang":"es","value":"Los robots cortacésped y aspiradores ECOVACS utilizan una contraseña raíz determinista generada en función del modelo y el número de serie. Un atacante con acceso de shell puede iniciar sesión como superusuario."}],"affected":[{"source":"9119a7d8-5eab-497f-8521-727c672e3725","affectedData":[{"vendor":"ECOVACS","product":"Unspecified robots","defaultStatus":"unknown","versions":[{"version":"*","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"9119a7d8-5eab-497f-8521-727c672e3725","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":7.0,"baseSeverity":"HIGH","attackVector":"PHYSICAL","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"9119a7d8-5eab-497f-8521-727c672e3725","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","baseScore":7.6,"baseSeverity":"HIGH","attackVector":"PHYSICAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.9,"impactScore":6.0}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-01-23T16:54:55.367221Z","id":"CVE-2024-11147","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"9119a7d8-5eab-497f-8521-727c672e3725","type":"Secondary","description":[{"lang":"en","value":"CWE-798"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_900_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"5004D440-E3EE-4252-831B-7396887BA117"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_900:-:*:*:*:*:*:*:*","matchCriteriaId":"0C4E3255-6E5D-46FC-8DE0-462788F1B4FD"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_n8_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"ACB3D3DB-AFB6-4B36-B86D-358BE11FAE3E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_n8:-:*:*:*:*:*:*:*","matchCriteriaId":"ED77EFA6-576C-411A-91D2-22C962C30C94"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_t8_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"AC59B209-998B-43A6-875D-364844CA37C7"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_t8:-:*:*:*:*:*:*:*","matchCriteriaId":"8BA30BA8-4069-4525-A843-E88EFDC720DF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_n9_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"43C72C62-49C3-49BE-A9F1-3572DA18647C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_n9:-:*:*:*:*:*:*:*","matchCriteriaId":"7A663879-36BF-433D-9D7A-B62D65A5C6C9"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_t9_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"D16EB997-ADC3-45AA-8E92-6F1371E85A35"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_t9:-:*:*:*:*:*:*:*","matchCriteriaId":"D63E5FF5-9A27-4674-B573-6929CAB3BB01"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_n10_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"F7060D3C-5F7C-4324-987D-C6EB4204CC47"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_n10:-:*:*:*:*:*:*:*","matchCriteriaId":"DCC67BB7-0E4A-47FA-A04D-41837A18E103"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_t10_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"C7422285-BB34-4D85-A4A4-ADD006401FE7"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_t10:-:*:*:*:*:*:*:*","matchCriteriaId":"318C962D-54C2-456E-A045-1332A02958E9"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_x1_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"A5248299-76EB-41DB-A036-5685F20D2A18"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_x1:-:*:*:*:*:*:*:*","matchCriteriaId":"4DA0B484-221F-4E67-927F-DBCBBC1F6448"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_t20_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"D1DE7CE5-6D8F-478B-AA9A-274AA74270AE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_t20:-:*:*:*:*:*:*:*","matchCriteriaId":"48123BA8-E8D5-4AEF-A4CF-8136AFA400F4"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_x2_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"3B39C403-6D28-41E3-A2D0-79473D6B9733"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_x2:-:*:*:*:*:*:*:*","matchCriteriaId":"3FD5AC03-3EF9-485F-B17A-E6D9D759A844"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:goat_g1_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"F1AA1C6D-E86C-46B6-AA32-FB9B34D60F1D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:goat_g1:-:*:*:*:*:*:*:*","matchCriteriaId":"75B2D398-870D-408F-817D-FDEE8C93D683"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:airbot_z1_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"FE2F668D-DD5C-4E70-A677-5029C25AB65E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:airbot_z1:-:*:*:*:*:*:*:*","matchCriteriaId":"28431C96-C4CF-4029-BBD0-1B364C406D86"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:airbot_ava_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"BA924895-0CE8-453A-98E0-0942AA33BECE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:airbot_ava:-:*:*:*:*:*:*:*","matchCriteriaId":"C193E51C-F9DD-43FD-913D-742513E63C61"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:airbot_andy_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"1E42AEAD-D52A-45E6-97FE-A6C8FE5C59BC"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:airbot_andy:-:*:*:*:*:*:*:*","matchCriteriaId":"E5752722-3EC7-401D-A114-ACA4662890BA"}]}]}],"references":[{"url":"https://builder.dontvacuum.me/ecopassword.php","source":"9119a7d8-5eab-497f-8521-727c672e3725","tags":["Product"]},{"url":"https://dontvacuum.me/talks/37c3-2023/37c3-vacuuming-and-mowing.pdf","source":"9119a7d8-5eab-497f-8521-727c672e3725","tags":["Exploit","Third Party Advisory"]},{"url":"https://dontvacuum.me/talks/HITCON2024/HITCON-CMT-2024_Ecovacs.pdf","source":"9119a7d8-5eab-497f-8521-727c672e3725","tags":["Exploit","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2024-12078","sourceIdentifier":"9119a7d8-5eab-497f-8521-727c672e3725","published":"2025-01-23T17:15:13.020","lastModified":"2026-06-17T06:59:00.173","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"ECOVACS robot lawn mowers and vacuums use a shared, static secret key to encrypt BLE GATT messages. An unauthenticated attacker within BLE range can control any robot using the same key."},{"lang":"es","value":"Los robots cortacésped y aspiradores ECOVACS utilizan una clave secreta estática compartida para cifrar los mensajes GATT de BLE. Un atacante no autenticado dentro del alcance de BLE puede controlar cualquier robot que utilice la misma clave."}],"affected":[{"source":"9119a7d8-5eab-497f-8521-727c672e3725","affectedData":[{"vendor":"ECOVACS","product":"Unspecified robots","defaultStatus":"unknown","versions":[{"version":"*","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"9119a7d8-5eab-497f-8521-727c672e3725","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"ADJACENT","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"LOW","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"9119a7d8-5eab-497f-8521-727c672e3725","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","baseScore":6.3,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":3.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-01-23T16:54:13.718772Z","id":"CVE-2024-12078","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"9119a7d8-5eab-497f-8521-727c672e3725","type":"Secondary","description":[{"lang":"en","value":"CWE-321"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_n10_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"F7060D3C-5F7C-4324-987D-C6EB4204CC47"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_n10:-:*:*:*:*:*:*:*","matchCriteriaId":"DCC67BB7-0E4A-47FA-A04D-41837A18E103"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_t10_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"C7422285-BB34-4D85-A4A4-ADD006401FE7"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_t10:-:*:*:*:*:*:*:*","matchCriteriaId":"318C962D-54C2-456E-A045-1332A02958E9"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_x1_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"A5248299-76EB-41DB-A036-5685F20D2A18"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_x1:-:*:*:*:*:*:*:*","matchCriteriaId":"4DA0B484-221F-4E67-927F-DBCBBC1F6448"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_t20_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"D1DE7CE5-6D8F-478B-AA9A-274AA74270AE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_t20:-:*:*:*:*:*:*:*","matchCriteriaId":"48123BA8-E8D5-4AEF-A4CF-8136AFA400F4"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_x2_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"3B39C403-6D28-41E3-A2D0-79473D6B9733"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_x2:-:*:*:*:*:*:*:*","matchCriteriaId":"3FD5AC03-3EF9-485F-B17A-E6D9D759A844"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:goat_g1_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"F1AA1C6D-E86C-46B6-AA32-FB9B34D60F1D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:goat_g1:-:*:*:*:*:*:*:*","matchCriteriaId":"75B2D398-870D-408F-817D-FDEE8C93D683"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:airbot_z1_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"FE2F668D-DD5C-4E70-A677-5029C25AB65E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:airbot_z1:-:*:*:*:*:*:*:*","matchCriteriaId":"28431C96-C4CF-4029-BBD0-1B364C406D86"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:airbot_ava_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"BA924895-0CE8-453A-98E0-0942AA33BECE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:airbot_ava:-:*:*:*:*:*:*:*","matchCriteriaId":"C193E51C-F9DD-43FD-913D-742513E63C61"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:airbot_andy_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"1E42AEAD-D52A-45E6-97FE-A6C8FE5C59BC"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:airbot_andy:-:*:*:*:*:*:*:*","matchCriteriaId":"E5752722-3EC7-401D-A114-ACA4662890BA"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_900_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"5004D440-E3EE-4252-831B-7396887BA117"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_900:-:*:*:*:*:*:*:*","matchCriteriaId":"0C4E3255-6E5D-46FC-8DE0-462788F1B4FD"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_n8_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"ACB3D3DB-AFB6-4B36-B86D-358BE11FAE3E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_n8:-:*:*:*:*:*:*:*","matchCriteriaId":"ED77EFA6-576C-411A-91D2-22C962C30C94"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_t8_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"AC59B209-998B-43A6-875D-364844CA37C7"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_t8:-:*:*:*:*:*:*:*","matchCriteriaId":"8BA30BA8-4069-4525-A843-E88EFDC720DF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_n9_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"43C72C62-49C3-49BE-A9F1-3572DA18647C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_n9:-:*:*:*:*:*:*:*","matchCriteriaId":"7A663879-36BF-433D-9D7A-B62D65A5C6C9"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_t9_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"D16EB997-ADC3-45AA-8E92-6F1371E85A35"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_t9:-:*:*:*:*:*:*:*","matchCriteriaId":"D63E5FF5-9A27-4674-B573-6929CAB3BB01"}]}]}],"references":[{"url":"https://dontvacuum.me/talks/37c3-2023/37c3-vacuuming-and-mowing.pdf","source":"9119a7d8-5eab-497f-8521-727c672e3725","tags":["Exploit","Third Party Advisory"]},{"url":"https://youtu.be/_wUsM0Mlenc?t=2041","source":"9119a7d8-5eab-497f-8521-727c672e3725","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2024-12079","sourceIdentifier":"9119a7d8-5eab-497f-8521-727c672e3725","published":"2025-01-23T17:15:13.187","lastModified":"2026-06-17T06:59:00.310","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"ECOVACS robot lawnmowers store the anti-theft PIN in cleartext on the device filesystem. An attacker can steal a lawnmower, read the PIN, and reset the anti-theft mechanism."},{"lang":"es","value":"Los robots cortacésped ECOVACS almacenan el PIN antirrobo en texto plano en el sistema de archivos del dispositivo. Un atacante puede robar un cortacésped, leer el PIN y restablecer el mecanismo antirrobo."}],"affected":[{"source":"9119a7d8-5eab-497f-8521-727c672e3725","affectedData":[{"vendor":"ECOVACS","product":"Unspecified robots","defaultStatus":"unknown","versions":[{"version":"*","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"9119a7d8-5eab-497f-8521-727c672e3725","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":4.8,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","userInteraction":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"9119a7d8-5eab-497f-8521-727c672e3725","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":3.3,"baseSeverity":"LOW","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-01-23T16:54:04.223721Z","id":"CVE-2024-12079","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"9119a7d8-5eab-497f-8521-727c672e3725","type":"Secondary","description":[{"lang":"en","value":"CWE-312"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_900_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"5004D440-E3EE-4252-831B-7396887BA117"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_900:-:*:*:*:*:*:*:*","matchCriteriaId":"0C4E3255-6E5D-46FC-8DE0-462788F1B4FD"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_n8_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"ACB3D3DB-AFB6-4B36-B86D-358BE11FAE3E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_n8:-:*:*:*:*:*:*:*","matchCriteriaId":"ED77EFA6-576C-411A-91D2-22C962C30C94"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_t8_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"AC59B209-998B-43A6-875D-364844CA37C7"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_t8:-:*:*:*:*:*:*:*","matchCriteriaId":"8BA30BA8-4069-4525-A843-E88EFDC720DF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_n9_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"43C72C62-49C3-49BE-A9F1-3572DA18647C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_n9:-:*:*:*:*:*:*:*","matchCriteriaId":"7A663879-36BF-433D-9D7A-B62D65A5C6C9"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_t9_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"D16EB997-ADC3-45AA-8E92-6F1371E85A35"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_t9:-:*:*:*:*:*:*:*","matchCriteriaId":"D63E5FF5-9A27-4674-B573-6929CAB3BB01"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_n10_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"F7060D3C-5F7C-4324-987D-C6EB4204CC47"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_n10:-:*:*:*:*:*:*:*","matchCriteriaId":"DCC67BB7-0E4A-47FA-A04D-41837A18E103"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_t10_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"C7422285-BB34-4D85-A4A4-ADD006401FE7"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_t10:-:*:*:*:*:*:*:*","matchCriteriaId":"318C962D-54C2-456E-A045-1332A02958E9"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_x1_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"A5248299-76EB-41DB-A036-5685F20D2A18"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_x1:-:*:*:*:*:*:*:*","matchCriteriaId":"4DA0B484-221F-4E67-927F-DBCBBC1F6448"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_t20_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"D1DE7CE5-6D8F-478B-AA9A-274AA74270AE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_t20:-:*:*:*:*:*:*:*","matchCriteriaId":"48123BA8-E8D5-4AEF-A4CF-8136AFA400F4"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_x2_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"3B39C403-6D28-41E3-A2D0-79473D6B9733"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_x2:-:*:*:*:*:*:*:*","matchCriteriaId":"3FD5AC03-3EF9-485F-B17A-E6D9D759A844"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:goat_g1_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"F1AA1C6D-E86C-46B6-AA32-FB9B34D60F1D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:goat_g1:-:*:*:*:*:*:*:*","matchCriteriaId":"75B2D398-870D-408F-817D-FDEE8C93D683"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:airbot_z1_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"FE2F668D-DD5C-4E70-A677-5029C25AB65E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:airbot_z1:-:*:*:*:*:*:*:*","matchCriteriaId":"28431C96-C4CF-4029-BBD0-1B364C406D86"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:airbot_ava_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"BA924895-0CE8-453A-98E0-0942AA33BECE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:airbot_ava:-:*:*:*:*:*:*:*","matchCriteriaId":"C193E51C-F9DD-43FD-913D-742513E63C61"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:airbot_andy_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"1E42AEAD-D52A-45E6-97FE-A6C8FE5C59BC"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:airbot_andy:-:*:*:*:*:*:*:*","matchCriteriaId":"E5752722-3EC7-401D-A114-ACA4662890BA"}]}]}],"references":[{"url":"https://dontvacuum.me/talks/37c3-2023/37c3-vacuuming-and-mowing.pdf","source":"9119a7d8-5eab-497f-8521-727c672e3725","tags":["Exploit","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2024-52327","sourceIdentifier":"9119a7d8-5eab-497f-8521-727c672e3725","published":"2025-01-23T17:15:13.890","lastModified":"2026-06-17T08:07:01.347","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"The cloud service used by ECOVACS robot lawnmowers and vacuums allows authenticated attackers to bypass the PIN entry required to access the live video feed."},{"lang":"es","value":"El servicio en la nube utilizado por los robots cortacésped y aspiradores ECOVACS permite a atacantes autenticados eludir la entrada del PIN necesaria para acceder a la transmisión de vídeo en directo."}],"affected":[{"source":"9119a7d8-5eab-497f-8521-727c672e3725","affectedData":[{"vendor":"ECOVACS","product":"ECOVACS HOME","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"3.0.2","versionType":"custom","status":"affected"},{"version":"3.0.2","status":"unaffected"}]},{"vendor":"ECOVACS","product":"cloud service","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"2024-12-17","versionType":"custom","status":"affected"},{"version":"2024-12-17","status":"unaffected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"9119a7d8-5eab-497f-8521-727c672e3725","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":6.0,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"9119a7d8-5eab-497f-8521-727c672e3725","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-01-23T16:53:52.437051Z","id":"CVE-2024-52327","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"9119a7d8-5eab-497f-8521-727c672e3725","type":"Secondary","description":[{"lang":"en","value":"CWE-603"},{"lang":"en","value":"CWE-807"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ecovacs:home:*:*:*:*:*:android:*:*","versionEndExcluding":"3.0.2","matchCriteriaId":"3E821D04-DCF5-41B9-8243-81A12D3A4F81"},{"vulnerable":true,"criteria":"cpe:2.3:a:ecovacs:home:*:*:*:*:*:iphone_os:*:*","versionEndExcluding":"3.0.2","matchCriteriaId":"8789EBAC-69FF-4527-87EC-DC6AF83B6E9A"}]}]}],"references":[{"url":"https://dontvacuum.me/talks/37c3-2023/37c3-vacuuming-and-mowing.pdf","source":"9119a7d8-5eab-497f-8521-727c672e3725","tags":["Exploit","Third Party Advisory"]},{"url":"https://dontvacuum.me/talks/HITCON2024/HITCON-CMT-2024_Ecovacs.pdf","source":"9119a7d8-5eab-497f-8521-727c672e3725","tags":["Exploit","Third Party Advisory"]},{"url":"https://www.ecovacs.com/global/userhelp/dsa20241217002","source":"9119a7d8-5eab-497f-8521-727c672e3725","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-52328","sourceIdentifier":"9119a7d8-5eab-497f-8521-727c672e3725","published":"2025-01-23T17:15:14.133","lastModified":"2026-06-17T08:07:01.470","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"ECOVACS robot lawnmowers and vacuums insecurely store audio files used to indicate that the camera is on. An attacker with access to the /data filesystem can delete or modify warning files such that users may not be aware that the camera is on."},{"lang":"es","value":"Los robots cortacésped y aspiradores ECOVACS almacenan de forma insegura archivos de audio que se utilizan para indicar que la cámara está encendida. Un atacante con acceso al sistema de archivos /data puede eliminar o modificar los archivos de advertencia de forma que los usuarios no sepan que la cámara está encendida."}],"affected":[{"source":"9119a7d8-5eab-497f-8521-727c672e3725","affectedData":[{"vendor":"ECOVACS","product":"Unspecified robots","defaultStatus":"unknown","versions":[{"version":"*","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"9119a7d8-5eab-497f-8521-727c672e3725","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:L/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":1.8,"baseSeverity":"LOW","attackVector":"LOCAL","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"HIGH","userInteraction":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"LOW","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"9119a7d8-5eab-497f-8521-727c672e3725","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N","baseScore":2.3,"baseSeverity":"LOW","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":0.8,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-01-23T16:56:59.738808Z","id":"CVE-2024-52328","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"9119a7d8-5eab-497f-8521-727c672e3725","type":"Secondary","description":[{"lang":"en","value":"CWE-732"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_n8_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"ACB3D3DB-AFB6-4B36-B86D-358BE11FAE3E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_n8:-:*:*:*:*:*:*:*","matchCriteriaId":"ED77EFA6-576C-411A-91D2-22C962C30C94"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_900_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"5004D440-E3EE-4252-831B-7396887BA117"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_900:-:*:*:*:*:*:*:*","matchCriteriaId":"0C4E3255-6E5D-46FC-8DE0-462788F1B4FD"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_t8_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"AC59B209-998B-43A6-875D-364844CA37C7"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_t8:-:*:*:*:*:*:*:*","matchCriteriaId":"8BA30BA8-4069-4525-A843-E88EFDC720DF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_n9_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"43C72C62-49C3-49BE-A9F1-3572DA18647C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_n9:-:*:*:*:*:*:*:*","matchCriteriaId":"7A663879-36BF-433D-9D7A-B62D65A5C6C9"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_t9_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"D16EB997-ADC3-45AA-8E92-6F1371E85A35"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_t9:-:*:*:*:*:*:*:*","matchCriteriaId":"D63E5FF5-9A27-4674-B573-6929CAB3BB01"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_n10_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"F7060D3C-5F7C-4324-987D-C6EB4204CC47"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_n10:-:*:*:*:*:*:*:*","matchCriteriaId":"DCC67BB7-0E4A-47FA-A04D-41837A18E103"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_t10_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"C7422285-BB34-4D85-A4A4-ADD006401FE7"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_t10:-:*:*:*:*:*:*:*","matchCriteriaId":"318C962D-54C2-456E-A045-1332A02958E9"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_x1_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"A5248299-76EB-41DB-A036-5685F20D2A18"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_x1:-:*:*:*:*:*:*:*","matchCriteriaId":"4DA0B484-221F-4E67-927F-DBCBBC1F6448"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_t20_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"D1DE7CE5-6D8F-478B-AA9A-274AA74270AE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_t20:-:*:*:*:*:*:*:*","matchCriteriaId":"48123BA8-E8D5-4AEF-A4CF-8136AFA400F4"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_x2_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"3B39C403-6D28-41E3-A2D0-79473D6B9733"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_x2:-:*:*:*:*:*:*:*","matchCriteriaId":"3FD5AC03-3EF9-485F-B17A-E6D9D759A844"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:goat_g1_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"F1AA1C6D-E86C-46B6-AA32-FB9B34D60F1D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:goat_g1:-:*:*:*:*:*:*:*","matchCriteriaId":"75B2D398-870D-408F-817D-FDEE8C93D683"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:airbot_z1_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"FE2F668D-DD5C-4E70-A677-5029C25AB65E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:airbot_z1:-:*:*:*:*:*:*:*","matchCriteriaId":"28431C96-C4CF-4029-BBD0-1B364C406D86"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:airbot_ava_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"BA924895-0CE8-453A-98E0-0942AA33BECE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:airbot_ava:-:*:*:*:*:*:*:*","matchCriteriaId":"C193E51C-F9DD-43FD-913D-742513E63C61"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:airbot_andy_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"1E42AEAD-D52A-45E6-97FE-A6C8FE5C59BC"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:airbot_andy:-:*:*:*:*:*:*:*","matchCriteriaId":"E5752722-3EC7-401D-A114-ACA4662890BA"}]}]}],"references":[{"url":"https://dontvacuum.me/talks/37c3-2023/37c3-vacuuming-and-mowing.pdf","source":"9119a7d8-5eab-497f-8521-727c672e3725","tags":["Exploit","Third Party Advisory"]},{"url":"https://dontvacuum.me/talks/HITCON2024/HITCON-CMT-2024_Ecovacs.pdf","source":"9119a7d8-5eab-497f-8521-727c672e3725","tags":["Exploit","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2024-52329","sourceIdentifier":"9119a7d8-5eab-497f-8521-727c672e3725","published":"2025-01-23T17:15:14.287","lastModified":"2026-06-17T08:07:01.607","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"ECOVACS HOME mobile app plugins for specific robots do not properly validate TLS certificates. An unauthenticated attacker can read or modify TLS traffic and obtain authentication tokens."},{"lang":"es","value":"Los complementos de la aplicación móvil ECOVACS HOME para robots específicos no validan correctamente los certificados TLS. Un atacante no autenticado puede leer o modificar el tráfico TLS y obtener tokens de autenticación."}],"affected":[{"source":"9119a7d8-5eab-497f-8521-727c672e3725","affectedData":[{"vendor":"ECOVACS","product":"ECOVACS HOME","defaultStatus":"unknown","versions":[{"version":"3.0.0","status":"unaffected"},{"version":"0","lessThan":"3.0.0","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"9119a7d8-5eab-497f-8521-727c672e3725","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":9.5,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","subIntegrityImpact":"HIGH","subAvailabilityImpact":"HIGH","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"9119a7d8-5eab-497f-8521-727c672e3725","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","baseScore":7.4,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":5.2},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","baseScore":7.4,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":5.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-01-23T16:56:47.220852Z","id":"CVE-2024-52329","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"9119a7d8-5eab-497f-8521-727c672e3725","type":"Secondary","description":[{"lang":"en","value":"CWE-295"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ecovacs:home:*:*:*:*:*:android:*:*","versionEndExcluding":"3.0.0","matchCriteriaId":"18E4E3AB-A14D-4AC7-8F95-3F6B234C6941"},{"vulnerable":true,"criteria":"cpe:2.3:a:ecovacs:home:*:*:*:*:*:iphone_os:*:*","versionEndExcluding":"3.0.0","matchCriteriaId":"FD8E06E5-A604-49B0-AC4F-CC6345F478F5"}]}]}],"references":[{"url":"https://dontvacuum.me/talks/37c3-2023/37c3-vacuuming-and-mowing.pdf","source":"9119a7d8-5eab-497f-8521-727c672e3725","tags":["Exploit","Third Party Advisory"]},{"url":"https://dontvacuum.me/talks/HITCON2024/HITCON-CMT-2024_Ecovacs.pdf","source":"9119a7d8-5eab-497f-8521-727c672e3725","tags":["Exploit","Third Party Advisory"]},{"url":"https://www.ecovacs.com/global/userhelp/dsa20241217001","source":"9119a7d8-5eab-497f-8521-727c672e3725","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-52330","sourceIdentifier":"9119a7d8-5eab-497f-8521-727c672e3725","published":"2025-01-23T17:15:14.427","lastModified":"2026-06-17T08:07:01.733","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"ECOVACS lawnmowers and vacuums do not properly validate TLS certificates. An unauthenticated attacker can read or modify TLS traffic, possibly modifying firmware updates."},{"lang":"es","value":"Las cortadoras de césped y las aspiradoras ECOVACS no validan correctamente los certificados TLS. Un atacante no autenticado puede leer o modificar el tráfico TLS, posiblemente modificando las actualizaciones de firmware."}],"affected":[{"source":"9119a7d8-5eab-497f-8521-727c672e3725","affectedData":[{"vendor":"ECOVACS","product":"DEEBOT X5 PRO PLUS","defaultStatus":"unknown","versions":[{"version":"1.38.0","status":"unaffected"},{"version":"0","lessThan":"1.38.0","versionType":"custom","status":"affected"}]},{"vendor":"ECOVACS","product":"DEEBOT X5 PRO","defaultStatus":"unknown","versions":[{"version":"1.70.0","status":"unaffected"},{"version":"0","lessThan":"1.70.0","versionType":"custom","status":"affected"}]},{"vendor":"ECOVACS","product":"DEEBOT X2S","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"1.49.0","versionType":"custom","status":"affected"},{"version":"1.49.0","status":"unaffected"}]},{"vendor":"ECOVACS","product":"DEEBOT X2  OMNI","defaultStatus":"unknown","versions":[{"version":"1.76.6","status":"unaffected"},{"version":"0","lessThan":"1.76.6","versionType":"custom","status":"affected"}]},{"vendor":"ECOVACS","product":"DEEBOT X1 TURBO","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"2.4.41","versionType":"custom","status":"affected"},{"version":"2.4.41","status":"unaffected"}]},{"vendor":"ECOVACS","product":"DEEBOT X1","defaultStatus":"unknown","versions":[{"version":"1.7.3","status":"unaffected"},{"version":"0","lessThan":"1.7.3","versionType":"custom","status":"affected"}]},{"vendor":"ECOVACS","product":"DEEBOT X1S PRO","defaultStatus":"unknown","versions":[{"version":"2.5.31","status":"unaffected"},{"version":"0","lessThan":"2.5.31","versionType":"custom","status":"affected"}]},{"vendor":"ECOVACS","product":"DEEBOT X1e OMNI","defaultStatus":"unknown","versions":[{"version":"2.4.42","status":"unaffected"},{"version":"0","lessThan":"2.4.42","versionType":"custom","status":"affected"}]},{"vendor":"ECOVACS","product":"DEEBOT T10 PLUS","defaultStatus":"unknown","versions":[{"version":"1.7.5","status":"unaffected"},{"version":"0","lessThan":"1.7.5","versionType":"custom","status":"affected"}]},{"vendor":"ECOVACS","product":"DEEBOT T10 OMNI","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"1.9.0","versionType":"custom","status":"affected"},{"version":"1.9.0","status":"unaffected"}]},{"vendor":"ECOVACS","product":"DEEBOT X5 PRO ULTRA","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"1.17.0","versionType":"custom","status":"affected"},{"version":"1.17.0","status":"unaffected"}]},{"vendor":"ECOVACS","product":"Mate X","defaultStatus":"unknown","versions":[{"version":"1.44.18","status":"unaffected"},{"version":"0","lessThan":"1.44.18","versionType":"custom","status":"affected"}]},{"vendor":"ECOVACS","product":"DEEBOT X2 PRO","defaultStatus":"unknown","versions":[{"version":"1.76.6","status":"unaffected"},{"version":"0","lessThan":"1.76.6","versionType":"custom","status":"affected"}]},{"vendor":"ECOVACS","product":"DEEBOT X2 COMBO","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"1.81.10","versionType":"custom","status":"affected"},{"version":"1.81.10","status":"unaffected"}]},{"vendor":"ECOVACS","product":"DEEBOT X1 OMNI","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"2.4.41","versionType":"custom","status":"affected"},{"version":"2.4.41","status":"unaffected"}]},{"vendor":"ECOVACS","product":"DEEBOT X1 PRO OMNI","defaultStatus":"unknown","versions":[{"version":"2.4.41","status":"unaffected"},{"version":"0","lessThan":"2.4.41","versionType":"custom","status":"affected"}]},{"vendor":"ECOVACS","product":"DEEBOT X1 PLUS","defaultStatus":"unknown","versions":[{"version":"1.7.3","status":"unaffected"},{"version":"0","lessThan":"1.7.3","versionType":"custom","status":"affected"}]},{"vendor":"ECOVACS","product":"DEEBOT X1S PRO PLUS","defaultStatus":"unknown","versions":[{"version":"1.23.0","status":"unaffected"},{"version":"0","lessThan":"1.23.0","versionType":"custom","status":"affected"}]},{"vendor":"ECOVACS","product":"DEEBOT T10 TURBO","defaultStatus":"unknown","versions":[{"version":"1.10.0","status":"unaffected"},{"version":"0","lessThan":"1.10.0","versionType":"custom","status":"affected"}]},{"vendor":"ECOVACS","product":"DEEBOT T10","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"1.7.5","versionType":"custom","status":"affected"},{"version":"1.7.5","status":"unaffected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"9119a7d8-5eab-497f-8521-727c672e3725","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":9.5,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","subIntegrityImpact":"HIGH","subAvailabilityImpact":"HIGH","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"9119a7d8-5eab-497f-8521-727c672e3725","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","baseScore":7.4,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":5.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-01-23T16:56:31.855219Z","id":"CVE-2024-52330","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"9119a7d8-5eab-497f-8521-727c672e3725","type":"Secondary","description":[{"lang":"en","value":"CWE-295"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_x2_omni_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.76.6","matchCriteriaId":"DFBAD9FC-1343-4D07-99E6-9E7C3D77C694"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_x2_omni:-:*:*:*:*:*:*:*","matchCriteriaId":"9BD94283-0BC1-4C7C-A5F3-9D57E44B4C64"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_x2_combo_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.81.10","matchCriteriaId":"DAF98AFD-C399-4AB8-A637-29561F39F134"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_x2_combo:-:*:*:*:*:*:*:*","matchCriteriaId":"2C12633C-1BD2-4BF6-BF11-FC05221B93EB"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_x2s_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.49.0","matchCriteriaId":"969D4A03-B499-4218-BF07-22E51654AA6C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_x2s:-:*:*:*:*:*:*:*","matchCriteriaId":"11AA1D51-EE29-4252-A739-1F1D4A3F428D"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_x5_pro_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.70.0","matchCriteriaId":"5B819C9B-F143-4A63-825C-B1DF1DCB16B7"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_x5_pro:-:*:*:*:*:*:*:*","matchCriteriaId":"64AB781B-CB28-4229-A74D-8CDD325EFAC3"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_x5_pro_plus_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.38.0","matchCriteriaId":"0F61F40B-6031-4C32-9571-B92C3377EFB2"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_x5_pro_plus:-:*:*:*:*:*:*:*","matchCriteriaId":"CFE49BE7-59E8-4447-B78B-4FEDF4F773CD"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_x5_pro_ultra_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.17.0","matchCriteriaId":"9C4821F3-3B7D-4035-980F-C11713C5D424"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_x5_pro_ultra:-:*:*:*:*:*:*:*","matchCriteriaId":"8504979A-A4F0-4A03-8816-E9AB3BD6F40B"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:mate_x_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.44.18","matchCriteriaId":"0C4EC5E7-04E3-497C-ACD9-2479C48A2FC4"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:mate_x:-:*:*:*:*:*:*:*","matchCriteriaId":"706F2C75-0E75-487B-BA24-EB824E6BC16B"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_x1_omni_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"2.4.41","matchCriteriaId":"8F75A470-5B86-41C6-86E2-232656AF68F9"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_x1_omni:-:*:*:*:*:*:*:*","matchCriteriaId":"91E23E30-45BE-4142-8E9C-032282F3B6A6"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_x1_turbo_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"2.4.41","matchCriteriaId":"0F868AC3-7B87-44E5-A7B0-F2C85DCA7E7C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_x1_turbo:-:*:*:*:*:*:*:*","matchCriteriaId":"65F69609-1D21-461A-9457-A745194759CD"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_x1_pro_omni_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"2.4.41","matchCriteriaId":"2B044584-55B4-4E88-99C9-9A48D9B4E908"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_x1_pro_omni:-:*:*:*:*:*:*:*","matchCriteriaId":"003B54E0-B2FF-485A-9A55-925609EE8DF1"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_x1_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.7.3","matchCriteriaId":"4AE87B2E-A1B1-438E-9482-E8466647050B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_x1:-:*:*:*:*:*:*:*","matchCriteriaId":"4DA0B484-221F-4E67-927F-DBCBBC1F6448"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_x1_plus_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.7.3","matchCriteriaId":"7DC2AA81-5895-43EE-8B34-D8074DDD301F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_x1_plus:-:*:*:*:*:*:*:*","matchCriteriaId":"C5586D60-D87F-45A1-8619-F6CC12AD9731"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_x1s_pro_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"2.5.31","matchCriteriaId":"849A58E5-2700-49F4-BF60-C35E97689AE1"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_x1s_pro:-:*:*:*:*:*:*:*","matchCriteriaId":"037628A9-DD54-4A4B-97A9-78142B76E91E"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_x1s_pro_plus_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.23.0","matchCriteriaId":"7526B614-1962-490C-8972-2A275A471A86"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_x1s_pro_plus:-:*:*:*:*:*:*:*","matchCriteriaId":"4612A790-C3CC-40AA-8E31-2C2918C6AB6C"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_x1e_omni_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"2.4.42","matchCriteriaId":"67C721A5-53B6-4B15-A76C-481EF4C45147"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_x1e_omni:-:*:*:*:*:*:*:*","matchCriteriaId":"16705AA3-4CAE-4BF5-8084-6A6CB30A1E8C"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_t10_turbo_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.10.0","matchCriteriaId":"454C233D-82D5-4B99-AC3A-94B1CF23F078"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_t10_turbo:-:*:*:*:*:*:*:*","matchCriteriaId":"85DEFE0B-99F7-49DF-96E3-69B6FC1EF262"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_t10_plus_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.7.5","matchCriteriaId":"79E44970-1ADF-4170-A09A-F64F02E27C64"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_t10_plus:-:*:*:*:*:*:*:*","matchCriteriaId":"1CBAA124-1B4C-4E75-80E1-A747AC9183E1"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_t10_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.7.5","matchCriteriaId":"4CA98740-BA9B-4479-B92F-F76B1234D2FE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_t10:-:*:*:*:*:*:*:*","matchCriteriaId":"318C962D-54C2-456E-A045-1332A02958E9"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_t10_omni_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.9.0","matchCriteriaId":"B843C490-26E9-4D03-8BCB-DBC462833D12"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_t10_omni:-:*:*:*:*:*:*:*","matchCriteriaId":"11395F70-87C2-41DD-9D9A-CFA8D0512ECE"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_x2_pro_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.76.6","matchCriteriaId":"F3F737D6-74BD-47F8-88B7-045E8B280E46"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_x2_pro:-:*:*:*:*:*:*:*","matchCriteriaId":"C98FE3FD-E432-4DD7-AF87-6FBA4C4ABC45"}]}]}],"references":[{"url":"https://dontvacuum.me/talks/37c3-2023/37c3-vacuuming-and-mowing.pdf","source":"9119a7d8-5eab-497f-8521-727c672e3725","tags":["Exploit","Third Party Advisory"]},{"url":"https://dontvacuum.me/talks/HITCON2024/HITCON-CMT-2024_Ecovacs.pdf","source":"9119a7d8-5eab-497f-8521-727c672e3725","tags":["Exploit","Third Party Advisory"]},{"url":"https://www.ecovacs.com/global/userhelp/dsa20241217001","source":"9119a7d8-5eab-497f-8521-727c672e3725","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-52331","sourceIdentifier":"9119a7d8-5eab-497f-8521-727c672e3725","published":"2025-01-23T17:15:14.563","lastModified":"2026-06-17T08:07:01.900","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"ECOVACS robot lawnmowers and vacuums use a deterministic symmetric key to decrypt firmware updates. An attacker can create and encrypt malicious firmware that will be successfully decrypted and installed by the robot."},{"lang":"es","value":"Los robots cortacésped y aspiradores ECOVACS utilizan una clave simétrica determinista para descifrar las actualizaciones de firmware. Un atacante puede crear y cifrar un firmware malicioso que el robot descifrará e instalará con éxito."}],"affected":[{"source":"9119a7d8-5eab-497f-8521-727c672e3725","affectedData":[{"vendor":"ECOVACS","product":"Unspecified robots","defaultStatus":"unknown","versions":[{"version":"*","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"9119a7d8-5eab-497f-8521-727c672e3725","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":7.7,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","userInteraction":"PASSIVE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"9119a7d8-5eab-497f-8521-727c672e3725","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.6,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-01-23T16:55:20.382490Z","id":"CVE-2024-52331","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"9119a7d8-5eab-497f-8521-727c672e3725","type":"Secondary","description":[{"lang":"en","value":"CWE-327"},{"lang":"en","value":"CWE-494"},{"lang":"en","value":"CWE-1391"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_900_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"5004D440-E3EE-4252-831B-7396887BA117"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_900:-:*:*:*:*:*:*:*","matchCriteriaId":"0C4E3255-6E5D-46FC-8DE0-462788F1B4FD"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_n8_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"ACB3D3DB-AFB6-4B36-B86D-358BE11FAE3E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_n8:-:*:*:*:*:*:*:*","matchCriteriaId":"ED77EFA6-576C-411A-91D2-22C962C30C94"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_t8_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"AC59B209-998B-43A6-875D-364844CA37C7"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_t8:-:*:*:*:*:*:*:*","matchCriteriaId":"8BA30BA8-4069-4525-A843-E88EFDC720DF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_n9_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"43C72C62-49C3-49BE-A9F1-3572DA18647C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_n9:-:*:*:*:*:*:*:*","matchCriteriaId":"7A663879-36BF-433D-9D7A-B62D65A5C6C9"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_t9_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"D16EB997-ADC3-45AA-8E92-6F1371E85A35"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_t9:-:*:*:*:*:*:*:*","matchCriteriaId":"D63E5FF5-9A27-4674-B573-6929CAB3BB01"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_n10_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"F7060D3C-5F7C-4324-987D-C6EB4204CC47"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_n10:-:*:*:*:*:*:*:*","matchCriteriaId":"DCC67BB7-0E4A-47FA-A04D-41837A18E103"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_t10_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"C7422285-BB34-4D85-A4A4-ADD006401FE7"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_t10:-:*:*:*:*:*:*:*","matchCriteriaId":"318C962D-54C2-456E-A045-1332A02958E9"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_x1_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"A5248299-76EB-41DB-A036-5685F20D2A18"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_x1:-:*:*:*:*:*:*:*","matchCriteriaId":"4DA0B484-221F-4E67-927F-DBCBBC1F6448"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_t20_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"D1DE7CE5-6D8F-478B-AA9A-274AA74270AE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_t20:-:*:*:*:*:*:*:*","matchCriteriaId":"48123BA8-E8D5-4AEF-A4CF-8136AFA400F4"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_x2_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"3B39C403-6D28-41E3-A2D0-79473D6B9733"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_x2:-:*:*:*:*:*:*:*","matchCriteriaId":"3FD5AC03-3EF9-485F-B17A-E6D9D759A844"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:goat_g1_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"F1AA1C6D-E86C-46B6-AA32-FB9B34D60F1D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:goat_g1:-:*:*:*:*:*:*:*","matchCriteriaId":"75B2D398-870D-408F-817D-FDEE8C93D683"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:airbot_z1_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"FE2F668D-DD5C-4E70-A677-5029C25AB65E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:airbot_z1:-:*:*:*:*:*:*:*","matchCriteriaId":"28431C96-C4CF-4029-BBD0-1B364C406D86"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:airbot_ava_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"BA924895-0CE8-453A-98E0-0942AA33BECE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:airbot_ava:-:*:*:*:*:*:*:*","matchCriteriaId":"C193E51C-F9DD-43FD-913D-742513E63C61"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:airbot_andy_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"1E42AEAD-D52A-45E6-97FE-A6C8FE5C59BC"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:airbot_andy:-:*:*:*:*:*:*:*","matchCriteriaId":"E5752722-3EC7-401D-A114-ACA4662890BA"}]}]}],"references":[{"url":"https://dontvacuum.me/talks/37c3-2023/37c3-vacuuming-and-mowing.pdf","source":"9119a7d8-5eab-497f-8521-727c672e3725","tags":["Exploit","Third Party Advisory"]},{"url":"https://dontvacuum.me/talks/HITCON2024/HITCON-CMT-2024_Ecovacs.html","source":"9119a7d8-5eab-497f-8521-727c672e3725","tags":["Exploit","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2025-2394","sourceIdentifier":"vdp@themissinglink.com.au","published":"2025-05-23T01:15:19.240","lastModified":"2026-06-17T09:06:55.363","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Ecovacs Home Android and iOS Mobile Applications up to version 3.3.0 contained embedded access keys and secrets for Alibaba Object Storage Service (OSS), leading to sensitive data disclosure."},{"lang":"es","value":"Las aplicaciones móviles Android e iOS de Ecovacs Home hasta la versión 3.3.0 contenían claves de acceso y secretos integrados para el Servicio de almacenamiento de objetos (OSS) de Alibaba, lo que provocó la divulgación de datos confidenciales."}],"affected":[{"source":"vdp@themissinglink.com.au","affectedData":[{"vendor":"Ecovacs","product":"Ecovacs Mobile and Android Application","defaultStatus":"unaffected","platforms":["Android","iOS"],"versions":[{"version":"3.3.0","versionType":"iOS, Android","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"vdp@themissinglink.com.au","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":4.7,"baseSeverity":"MEDIUM","attackVector":"PHYSICAL","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"LOW","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"HIGH","subIntegrityImpact":"HIGH","subAvailabilityImpact":"HIGH","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-05-23T13:16:37.932318Z","id":"CVE-2025-2394","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"vdp@themissinglink.com.au","type":"Secondary","description":[{"lang":"en","value":"CWE-798"}]}],"references":[{"url":"https://www.ecovacs.com/global/userhelp/dsa20250507001","source":"vdp@themissinglink.com.au"},{"url":"https://www.themissinglink.com.au/security-advisories/cve-2025-2394","source":"vdp@themissinglink.com.au"}]}},{"cve":{"id":"CVE-2025-44251","sourceIdentifier":"cve@mitre.org","published":"2025-07-10T15:15:28.263","lastModified":"2026-07-05T01:21:41.040","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Ecovacs Deebot T10 1.7.2 transmits Wi-Fi credentials in cleartext during the pairing process."},{"lang":"es","value":"Ecovacs Deebot T10 1.7.2 transmite las credenciales de Wi-Fi en texto sin formato durante el proceso de emparejamiento."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-07-11T16:07:23.177885Z","id":"CVE-2025-44251","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-319"}]}],"references":[{"url":"https://httpscolonforwardslashforwardslashwwwdotzoltanbalazsdotcom.com/2025/07/09/CVE-2025-44251.html","source":"cve@mitre.org"}]}},{"cve":{"id":"CVE-2025-30198","sourceIdentifier":"9119a7d8-5eab-497f-8521-727c672e3725","published":"2025-09-05T18:15:39.353","lastModified":"2026-06-17T09:08:20.330","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"ECOVACS robot vacuums and base stations communicate via an insecure Wi-Fi network with a deterministic WPA2-PSK, which can be easily derived."}],"affected":[{"source":"9119a7d8-5eab-497f-8521-727c672e3725","affectedData":[{"vendor":"ECOVACS","product":"DEEBOT X1 Series","defaultStatus":"unknown","versions":[{"version":"*","status":"affected"}]},{"vendor":"ECOVACS","product":"DEEBOT T20 Series","defaultStatus":"unknown","versions":[{"version":"*","status":"affected"}]},{"vendor":"ECOVACS","product":"DEEBOT T10 Series","defaultStatus":"unknown","versions":[{"version":"*","status":"affected"}]},{"vendor":"ECOVACS","product":"DEEBOT T30 Series","defaultStatus":"unknown","versions":[{"version":"*","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"9119a7d8-5eab-497f-8521-727c672e3725","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":2.3,"baseSeverity":"LOW","attackVector":"ADJACENT","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"LOW","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"9119a7d8-5eab-497f-8521-727c672e3725","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","baseScore":6.3,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":3.4}],"ssvcV203":[{"source":"9119a7d8-5eab-497f-8521-727c672e3725","ssvcData":{"timestamp":"2025-09-08T18:08:40.565084Z","id":"CVE-2025-30198","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-09-08T18:20:11.799443Z","id":"CVE-2025-30198","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"9119a7d8-5eab-497f-8521-727c672e3725","type":"Secondary","description":[{"lang":"en","value":"CWE-321"},{"lang":"en","value":"CWE-798"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-798"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_x1s_pro_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"2.5.38","matchCriteriaId":"AC05115A-88CE-44C9-B53A-E5B0F3AEF061"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_x1s_pro:-:*:*:*:*:*:*:*","matchCriteriaId":"037628A9-DD54-4A4B-97A9-78142B76E91E"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_x1_pro_omni_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"2.5.38","matchCriteriaId":"C5BD12C9-8159-480E-8F8D-34675B987912"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_x1_pro_omni:-:*:*:*:*:*:*:*","matchCriteriaId":"003B54E0-B2FF-485A-9A55-925609EE8DF1"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_x1_omni_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"2.4.45","matchCriteriaId":"F3631308-6EFE-4368-AD5F-443706623DFB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_x1_omni:-:*:*:*:*:*:*:*","matchCriteriaId":"91E23E30-45BE-4142-8E9C-032282F3B6A6"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_x1s_pro_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"2.4.45","matchCriteriaId":"476156B2-527A-4536-A028-F2C882BF48C1"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_x1s_pro:-:*:*:*:*:*:*:*","matchCriteriaId":"037628A9-DD54-4A4B-97A9-78142B76E91E"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_x1_turbo_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"2.5.38","matchCriteriaId":"80157CEF-397B-45ED-A1A3-AABD4E0E2170"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_x1_turbo:-:*:*:*:*:*:*:*","matchCriteriaId":"65F69609-1D21-461A-9457-A745194759CD"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_x1s_pro_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"2.4.45","matchCriteriaId":"476156B2-527A-4536-A028-F2C882BF48C1"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_x1s_pro:-:*:*:*:*:*:*:*","matchCriteriaId":"037628A9-DD54-4A4B-97A9-78142B76E91E"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_t10_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.11.0","matchCriteriaId":"6DEFD6A2-1283-4631-9AE3-9347ACAE9568"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_t10:-:*:*:*:*:*:*:*","matchCriteriaId":"318C962D-54C2-456E-A045-1332A02958E9"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_t10_omni_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.11.0","matchCriteriaId":"84565C28-CE48-4008-83BA-4132CA50EE03"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_t10_omni:-:*:*:*:*:*:*:*","matchCriteriaId":"11395F70-87C2-41DD-9D9A-CFA8D0512ECE"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_t10_plus_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.11.0","matchCriteriaId":"8DCA4CF1-6C07-4EA5-A54C-D5C84FAB752A"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_t10_plus:-:*:*:*:*:*:*:*","matchCriteriaId":"1CBAA124-1B4C-4E75-80E1-A747AC9183E1"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_t10_turbo_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.11.0","matchCriteriaId":"F736710C-7AFE-4D52-A353-E8D42ECCEC54"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_t10_turbo:-:*:*:*:*:*:*:*","matchCriteriaId":"85DEFE0B-99F7-49DF-96E3-69B6FC1EF262"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_t20_omni_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.25.0","matchCriteriaId":"69792E89-A3F2-4545-AAD9-25FEB81EDB58"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_t20_omni:-:*:*:*:*:*:*:*","matchCriteriaId":"6938C0BF-F53B-4F93-A8E9-5FEC280DA477"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_t20_pro_plus_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.25.0","matchCriteriaId":"918AF480-BDB5-4925-B9FE-EED491983152"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_t20_pro_plus:-:*:*:*:*:*:*:*","matchCriteriaId":"EA4D16A6-A8B8-44C5-9FDC-CD05069F2FFA"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_t20_pro_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.25.0","matchCriteriaId":"643E2424-6282-47EA-BC6B-B5C058942538"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_t20_pro:-:*:*:*:*:*:*:*","matchCriteriaId":"E3E5F4E4-30FE-4E76-8BA2-CEEBC81DA4E6"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_t30_omni_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.100.0","matchCriteriaId":"EADCF051-0A70-4314-9118-18B38C5C7F93"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_t30_omni:-:*:*:*:*:*:*:*","matchCriteriaId":"5B4D1A83-F00F-4F66-88DF-67C9FD036016"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_t30s_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.100.0","matchCriteriaId":"6BE558FD-B245-4B1A-82BA-04F80DB518AF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_t30s:-:*:*:*:*:*:*:*","matchCriteriaId":"EAC6EDB9-24EE-4113-B3D6-90CA18590BA9"}]}]}],"references":[{"url":"https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-135-19.json","source":"9119a7d8-5eab-497f-8521-727c672e3725","tags":["Third Party Advisory"]},{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-25-135-19","source":"9119a7d8-5eab-497f-8521-727c672e3725","tags":["Third Party Advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-30198","source":"9119a7d8-5eab-497f-8521-727c672e3725","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2025-30199","sourceIdentifier":"9119a7d8-5eab-497f-8521-727c672e3725","published":"2025-09-05T18:15:39.553","lastModified":"2026-06-17T09:08:20.473","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"ECOVACS vacuum robot base stations do not validate firmware updates, so malicious over-the-air updates can be sent to base station via insecure connection between robot and base station."}],"affected":[{"source":"9119a7d8-5eab-497f-8521-727c672e3725","affectedData":[{"vendor":"ECOVACS","product":"DEEBOT X1 Series","defaultStatus":"unknown","versions":[{"version":"*","status":"affected"}]},{"vendor":"ECOVACS","product":"DEEBOT T20 Series","defaultStatus":"unknown","versions":[{"version":"*","status":"affected"}]},{"vendor":"ECOVACS","product":"DEEBOT T10 Series","defaultStatus":"unknown","versions":[{"version":"*","status":"affected"}]},{"vendor":"ECOVACS","product":"DEEBOT T30 Series","defaultStatus":"unknown","versions":[{"version":"*","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"9119a7d8-5eab-497f-8521-727c672e3725","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"HIGH","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"9119a7d8-5eab-497f-8521-727c672e3725","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}],"ssvcV203":[{"source":"9119a7d8-5eab-497f-8521-727c672e3725","ssvcData":{"timestamp":"2025-09-08T18:09:57.869806Z","id":"CVE-2025-30199","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-09-08T18:20:48.723390Z","id":"CVE-2025-30199","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"9119a7d8-5eab-497f-8521-727c672e3725","type":"Secondary","description":[{"lang":"en","value":"CWE-494"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_x1s_pro_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"2.5.38","matchCriteriaId":"AC05115A-88CE-44C9-B53A-E5B0F3AEF061"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_x1s_pro:-:*:*:*:*:*:*:*","matchCriteriaId":"037628A9-DD54-4A4B-97A9-78142B76E91E"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_x1_pro_omni_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"2.5.38","matchCriteriaId":"C5BD12C9-8159-480E-8F8D-34675B987912"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_x1_pro_omni:-:*:*:*:*:*:*:*","matchCriteriaId":"003B54E0-B2FF-485A-9A55-925609EE8DF1"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_x1_omni_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"2.4.45","matchCriteriaId":"F3631308-6EFE-4368-AD5F-443706623DFB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_x1_omni:-:*:*:*:*:*:*:*","matchCriteriaId":"91E23E30-45BE-4142-8E9C-032282F3B6A6"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_x1s_pro_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"2.4.45","matchCriteriaId":"476156B2-527A-4536-A028-F2C882BF48C1"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_x1s_pro:-:*:*:*:*:*:*:*","matchCriteriaId":"037628A9-DD54-4A4B-97A9-78142B76E91E"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_x1_turbo_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"2.5.38","matchCriteriaId":"80157CEF-397B-45ED-A1A3-AABD4E0E2170"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_x1_turbo:-:*:*:*:*:*:*:*","matchCriteriaId":"65F69609-1D21-461A-9457-A745194759CD"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_x1s_pro_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"2.4.45","matchCriteriaId":"476156B2-527A-4536-A028-F2C882BF48C1"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_x1s_pro:-:*:*:*:*:*:*:*","matchCriteriaId":"037628A9-DD54-4A4B-97A9-78142B76E91E"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_t10_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.11.0","matchCriteriaId":"6DEFD6A2-1283-4631-9AE3-9347ACAE9568"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_t10:-:*:*:*:*:*:*:*","matchCriteriaId":"318C962D-54C2-456E-A045-1332A02958E9"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_t10_omni_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.11.0","matchCriteriaId":"84565C28-CE48-4008-83BA-4132CA50EE03"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_t10_omni:-:*:*:*:*:*:*:*","matchCriteriaId":"11395F70-87C2-41DD-9D9A-CFA8D0512ECE"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_t10_plus_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.11.0","matchCriteriaId":"8DCA4CF1-6C07-4EA5-A54C-D5C84FAB752A"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_t10_plus:-:*:*:*:*:*:*:*","matchCriteriaId":"1CBAA124-1B4C-4E75-80E1-A747AC9183E1"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_t10_turbo_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.11.0","matchCriteriaId":"F736710C-7AFE-4D52-A353-E8D42ECCEC54"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_t10_turbo:-:*:*:*:*:*:*:*","matchCriteriaId":"85DEFE0B-99F7-49DF-96E3-69B6FC1EF262"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_t20_omni_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.25.0","matchCriteriaId":"69792E89-A3F2-4545-AAD9-25FEB81EDB58"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_t20_omni:-:*:*:*:*:*:*:*","matchCriteriaId":"6938C0BF-F53B-4F93-A8E9-5FEC280DA477"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_t20_pro_plus_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.25.0","matchCriteriaId":"918AF480-BDB5-4925-B9FE-EED491983152"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_t20_pro_plus:-:*:*:*:*:*:*:*","matchCriteriaId":"EA4D16A6-A8B8-44C5-9FDC-CD05069F2FFA"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_t20_pro_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.25.0","matchCriteriaId":"643E2424-6282-47EA-BC6B-B5C058942538"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_t20_pro:-:*:*:*:*:*:*:*","matchCriteriaId":"E3E5F4E4-30FE-4E76-8BA2-CEEBC81DA4E6"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_t30_omni_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.100.0","matchCriteriaId":"EADCF051-0A70-4314-9118-18B38C5C7F93"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_t30_omni:-:*:*:*:*:*:*:*","matchCriteriaId":"5B4D1A83-F00F-4F66-88DF-67C9FD036016"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_t30s_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.100.0","matchCriteriaId":"6BE558FD-B245-4B1A-82BA-04F80DB518AF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_t30s:-:*:*:*:*:*:*:*","matchCriteriaId":"EAC6EDB9-24EE-4113-B3D6-90CA18590BA9"}]}]}],"references":[{"url":"https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-135-19.json","source":"9119a7d8-5eab-497f-8521-727c672e3725","tags":["Third Party Advisory"]},{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-25-135-19","source":"9119a7d8-5eab-497f-8521-727c672e3725","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-30199","source":"9119a7d8-5eab-497f-8521-727c672e3725","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2025-30200","sourceIdentifier":"9119a7d8-5eab-497f-8521-727c672e3725","published":"2025-09-05T18:15:39.727","lastModified":"2026-06-17T09:08:20.620","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"ECOVACS robot vacuums and base stations communicate via an insecure Wi-Fi network with a deterministic AES encryption key, which can be easily derived."}],"affected":[{"source":"9119a7d8-5eab-497f-8521-727c672e3725","affectedData":[{"vendor":"ECOVACS","product":"DEEBOT X1 Series","defaultStatus":"unknown","versions":[{"version":"*","status":"affected"}]},{"vendor":"ECOVACS","product":"DEEBOT T20 Series","defaultStatus":"unknown","versions":[{"version":"*","status":"affected"}]},{"vendor":"ECOVACS","product":"DEEBOT T10 Series","defaultStatus":"unknown","versions":[{"version":"*","status":"affected"}]},{"vendor":"ECOVACS","product":"DEEBOT T30 Series","defaultStatus":"unknown","versions":[{"version":"*","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"9119a7d8-5eab-497f-8521-727c672e3725","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":2.3,"baseSeverity":"LOW","attackVector":"ADJACENT","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"LOW","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"9119a7d8-5eab-497f-8521-727c672e3725","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","baseScore":6.3,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":3.4}],"ssvcV203":[{"source":"9119a7d8-5eab-497f-8521-727c672e3725","ssvcData":{"timestamp":"2025-09-08T18:11:07.109909Z","id":"CVE-2025-30200","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-09-08T18:22:11.344266Z","id":"CVE-2025-30200","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"9119a7d8-5eab-497f-8521-727c672e3725","type":"Secondary","description":[{"lang":"en","value":"CWE-321"},{"lang":"en","value":"CWE-798"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_x1s_pro_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"2.5.38","matchCriteriaId":"AC05115A-88CE-44C9-B53A-E5B0F3AEF061"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_x1s_pro:-:*:*:*:*:*:*:*","matchCriteriaId":"037628A9-DD54-4A4B-97A9-78142B76E91E"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_x1_pro_omni_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"2.5.38","matchCriteriaId":"C5BD12C9-8159-480E-8F8D-34675B987912"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_x1_pro_omni:-:*:*:*:*:*:*:*","matchCriteriaId":"003B54E0-B2FF-485A-9A55-925609EE8DF1"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_x1_omni_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"2.4.45","matchCriteriaId":"F3631308-6EFE-4368-AD5F-443706623DFB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_x1_omni:-:*:*:*:*:*:*:*","matchCriteriaId":"91E23E30-45BE-4142-8E9C-032282F3B6A6"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_x1s_pro_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"2.4.45","matchCriteriaId":"476156B2-527A-4536-A028-F2C882BF48C1"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_x1s_pro:-:*:*:*:*:*:*:*","matchCriteriaId":"037628A9-DD54-4A4B-97A9-78142B76E91E"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_x1_turbo_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"2.5.38","matchCriteriaId":"80157CEF-397B-45ED-A1A3-AABD4E0E2170"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_x1_turbo:-:*:*:*:*:*:*:*","matchCriteriaId":"65F69609-1D21-461A-9457-A745194759CD"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_x1s_pro_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"2.4.45","matchCriteriaId":"476156B2-527A-4536-A028-F2C882BF48C1"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_x1s_pro:-:*:*:*:*:*:*:*","matchCriteriaId":"037628A9-DD54-4A4B-97A9-78142B76E91E"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_t10_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.11.0","matchCriteriaId":"6DEFD6A2-1283-4631-9AE3-9347ACAE9568"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_t10:-:*:*:*:*:*:*:*","matchCriteriaId":"318C962D-54C2-456E-A045-1332A02958E9"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_t10_omni_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.11.0","matchCriteriaId":"84565C28-CE48-4008-83BA-4132CA50EE03"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_t10_omni:-:*:*:*:*:*:*:*","matchCriteriaId":"11395F70-87C2-41DD-9D9A-CFA8D0512ECE"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_t10_plus_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.11.0","matchCriteriaId":"8DCA4CF1-6C07-4EA5-A54C-D5C84FAB752A"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_t10_plus:-:*:*:*:*:*:*:*","matchCriteriaId":"1CBAA124-1B4C-4E75-80E1-A747AC9183E1"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_t10_turbo_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.11.0","matchCriteriaId":"F736710C-7AFE-4D52-A353-E8D42ECCEC54"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_t10_turbo:-:*:*:*:*:*:*:*","matchCriteriaId":"85DEFE0B-99F7-49DF-96E3-69B6FC1EF262"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_t20_omni_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.25.0","matchCriteriaId":"69792E89-A3F2-4545-AAD9-25FEB81EDB58"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_t20_omni:-:*:*:*:*:*:*:*","matchCriteriaId":"6938C0BF-F53B-4F93-A8E9-5FEC280DA477"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_t20_pro_plus_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.25.0","matchCriteriaId":"918AF480-BDB5-4925-B9FE-EED491983152"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_t20_pro_plus:-:*:*:*:*:*:*:*","matchCriteriaId":"EA4D16A6-A8B8-44C5-9FDC-CD05069F2FFA"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_t20_pro_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.25.0","matchCriteriaId":"643E2424-6282-47EA-BC6B-B5C058942538"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_t20_pro:-:*:*:*:*:*:*:*","matchCriteriaId":"E3E5F4E4-30FE-4E76-8BA2-CEEBC81DA4E6"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_t30_omni_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.100.0","matchCriteriaId":"EADCF051-0A70-4314-9118-18B38C5C7F93"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_t30_omni:-:*:*:*:*:*:*:*","matchCriteriaId":"5B4D1A83-F00F-4F66-88DF-67C9FD036016"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecovacs:deebot_t30s_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.100.0","matchCriteriaId":"6BE558FD-B245-4B1A-82BA-04F80DB518AF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecovacs:deebot_t30s:-:*:*:*:*:*:*:*","matchCriteriaId":"EAC6EDB9-24EE-4113-B3D6-90CA18590BA9"}]}]}],"references":[{"url":"https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-135-19.json","source":"9119a7d8-5eab-497f-8521-727c672e3725","tags":["Third Party Advisory"]},{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-25-135-19","source":"9119a7d8-5eab-497f-8521-727c672e3725","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-30200","source":"9119a7d8-5eab-497f-8521-727c672e3725","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2026-66410","sourceIdentifier":"vultures@jpcert.or.jp","published":"2026-08-10T09:17:23.350","lastModified":"2026-08-28T16:09:10.947","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Android and iOS apps ECOVACS PRO App improperly validate server certificates.\r\nCommunication may be retrieved and/or altered."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"ECOVACS ROBOTICS","product":"Android App \"ECOVACS PRO\"","defaultStatus":"unaffected","versions":[{"version":"0","lessThan":"1.3.82","versionType":"semver","status":"affected"}]},{"vendor":"ECOVACS ROBOTICS","product":"iOS App \"ECOVACS PRO\"","defaultStatus":"unaffected","versions":[{"version":"0","lessThan":"1.3.82","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"vultures@jpcert.or.jp","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":2.3,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","userInteraction":"PASSIVE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"LOW","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"vultures@jpcert.or.jp","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","baseScore":4.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":2.5}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-10T11:08:48.975202Z","id":"CVE-2026-66410","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"vultures@jpcert.or.jp","type":"Secondary","description":[{"lang":"en","value":"CWE-295"}]}],"references":[{"url":"https://jvn.jp/en/vu/JVNVU92804348/","source":"vultures@jpcert.or.jp"},{"url":"https://robot.hellohas.co.jp/news/update_20260331/","source":"vultures@jpcert.or.jp"}]}}]}