Low severity3.3NVD Advisory· Published Jan 23, 2025· Updated Jun 17, 2026

CVE-2024-12079

Description

ECOVACS robot lawnmowers store the anti-theft PIN in cleartext on the device filesystem. An attacker can steal a lawnmower, read the PIN, and reset the anti-theft mechanism.

Affected products

Ecovacs/robot lawnmowersllm-fuzzy
ECOVACS/Unspecified robotsv5
Range: *

Patches

Vulnerability mechanics

References

dontvacuum.me/talks/37c3-2023/37c3-vacuuming-and-mowing.pdfnvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.214
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000