← All advisories

Critical severity9.6NVD Advisory· Published Jan 23, 2025· Updated Jun 17, 2026

CVE-2024-52325

CVE-2024-52325

Description

ECOVACS robot lawnmowers and vacuums are vulnerable to command injection via SetNetPin() over an unauthenticated BLE connection.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Ecovacs/lawnmowers and vacuumsllm-fuzzy
Ecovacs/Deebot T30 Omniv5
Range: 0
ECOVACS/GOAT G1-800v5
Range: 0

Patches

Vulnerability mechanics

References

4

dontvacuum.me/talks/DEFCON32/DEFCON32_reveng_hacking_ecovacs_robots.pdfnvdExploitThird Party Advisory
youtu.be/_wUsM0MlencnvdExploit
www.ecovacs.com/global/userhelp/dsa20241119nvdVendor Advisory
www.ecovacs.com/global/userhelp/dsa20241130001nvdVendor Advisory

News mentions

0

No linked articles in our index yet.