CVE-2024-12079

ECOVACS lawnmowers cleartext storage of anti-theft PIN PUBLISHED

Description (CNA)

ECOVACS robot lawnmowers store the anti-theft PIN in cleartext on the device filesystem. An attacker can steal a lawnmower, read the PIN, and reset the anti-theft mechanism.

Affected (CNA)

Vendor / product	Versions
ECOVACS / Unspecified robots	affected *

CWE

CWE-312

References

https://dontvacuum.me/talks/37c3-2023/37c3-vacuuming-and-mowing.pdf

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.