Description (CNA)
ECOVACS robot lawnmowers and vacuums are vulnerable to command injection via SetNetPin() over an unauthenticated BLE connection.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| ECOVACS / GOAT G1 | affected 0 before 1.36.187; unaffected 1.36.187 |
| ECOVACS / GOAT G1-800 | affected 0 before 1.36.187; unaffected 1.36.187 |
| ECOVACS / DEEBOT X2S | affected 0 before 1.49.0; unaffected 1.49.0 |
| ECOVACS / DEEBOT X5 PRO | affected 0 before 1.70.0; unaffected 1.70.0 |
| ECOVACS / DEEBOT X5 PRO PLUS | affected 0 before 1.38.0; unaffected 1.38.0 |
| ECOVACS / DEEBOT T30 OMNI | affected 0 before 1.93.0; unaffected 1.93.0 |
| ECOVACS / DEEBOT T30S | affected 0 before 1.95.0; unaffected 1.95.0 |
| ECOVACS / GOAT G1-2000 | affected 0 before 1.36.187; unaffected 1.36.187 |
| ECOVACS / GOAT GX-600 | affected 0 before 1.2.120; unaffected 1.2.120 |
| ECOVACS / DEEBOT X2 OMNI | affected 0 before 1.76.6; unaffected 1.76.6 |
| ECOVACS / DEEBOT X2 COMBO | affected 0 before 1.81.10; unaffected 1.81.10 |
| ECOVACS / DEEBOT X5 PRO ULTRA | affected 0 before 1.17.0; unaffected 1.17.0 |
CWE
CWE-77
References
- https://dontvacuum.me/talks/DEFCON32/DEFCON32_reveng_hacking_ecovacs_robots.pdf
- https://youtu.be/_wUsM0Mlenc?t=2041
- https://www.ecovacs.com/global/userhelp/dsa20241130001
- https://www.ecovacs.com/global/userhelp/dsa20241119
ADP enrichment
No English description supplied.
No references supplied.