Critical severity9.6NVD Advisory· Published Jan 23, 2025· Updated Jun 17, 2026

CVE-2024-52325

Description

ECOVACS robot lawnmowers and vacuums are vulnerable to command injection via SetNetPin() over an unauthenticated BLE connection.

LLM-synthesized narrative grounded in this CVE's description and references.

Ecovacs/Deebot T30 Omni Firmware
cpe:2.3:o:ecovacs:deebot_t30_omni_firmware:*:*:*:*:*:*:*:*
Range: <1.93.0
Ecovacs/Deebot T30s Firmware
cpe:2.3:o:ecovacs:deebot_t30s_firmware:*:*:*:*:*:*:*:*
Range: <1.95.0
Ecovacs/Deebot X2 Combo Firmware
cpe:2.3:o:ecovacs:deebot_x2_combo_firmware:*:*:*:*:*:*:*:*
Range: <1.81.10
Ecovacs/Deebot X2 Omni Firmware
cpe:2.3:o:ecovacs:deebot_x2_omni_firmware:*:*:*:*:*:*:*:*
Range: <1.76.6
Ecovacs/Deebot X2s Firmware
cpe:2.3:o:ecovacs:deebot_x2s_firmware:*:*:*:*:*:*:*:*
Range: <1.49.0
Ecovacs/Deebot X5 Pro Firmware
cpe:2.3:o:ecovacs:deebot_x5_pro_firmware:*:*:*:*:*:*:*:*
Range: <1.70.0
Ecovacs/Deebot X5 Pro Plus Firmware
cpe:2.3:o:ecovacs:deebot_x5_pro_plus_firmware:*:*:*:*:*:*:*:*
Range: <1.38.0
Ecovacs/Deebot X5 Pro Ultra Firmware
cpe:2.3:o:ecovacs:deebot_x5_pro_ultra_firmware:*:*:*:*:*:*:*:*
Range: <1.17.0
Ecovacs/Goat G1 2000 Firmware
cpe:2.3:o:ecovacs:goat_g1-2000_firmware:*:*:*:*:*:*:*:*
Range: <1.36.187
Ecovacs/Goat G1 800 Firmware2 versions
cpe:2.3:o:ecovacs:goat_g1-800_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:ecovacs:goat_g1-800_firmware:*:*:*:*:*:*:*:*range: <1.36.187
- (no CPE)range: 0
Ecovacs/Goat G1 Firmware
cpe:2.3:o:ecovacs:goat_g1_firmware:*:*:*:*:*:*:*:*
Range: <1.36.187
Ecovacs/Gx 600 Firmware
cpe:2.3:o:ecovacs:gx-600_firmware:*:*:*:*:*:*:*:*
Range: <1.2.120
Ecovacs/lawnmowers and vacuumsllm-fuzzy
Ecovacs/Deebot T30 Omniv5
Range: 0

No linked articles in our index yet.