High severity · published Jan 23, 2025
CVE-2024-52331
ECOVACS lawnmowers and vacuums deterministic firmware encryption key
7.5
CVSS
0.2%
EPSS
No
On KEV
Description
ECOVACS robot lawnmowers and vacuums use a deterministic symmetric key to decrypt firmware updates. An attacker can create and encrypt malicious firmware that will be successfully decrypted and installed by the robot.
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
High
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 12% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
UR
Unspecified robots · ECOVACS
All versions, or not specified · source: vendor
AA
Airbot Andy Firmware · Ecovacs
All versions, or not specified · source: NVD
AA
Airbot Ava Firmware · Ecovacs
All versions, or not specified · source: NVD
AZ
Airbot Z1 Firmware · Ecovacs
All versions, or not specified · source: NVD
D9
Deebot 900 Firmware · Ecovacs
All versions, or not specified · source: NVD
DN
Deebot N10 Firmware · Ecovacs
All versions, or not specified · source: NVD
DN
Deebot N8 Firmware · Ecovacs
All versions, or not specified · source: NVD
DN
Deebot N9 Firmware · Ecovacs
All versions, or not specified · source: NVD
DT
Deebot T10 Firmware · Ecovacs
All versions, or not specified · source: NVD
DT
Deebot T20 Firmware · Ecovacs
All versions, or not specified · source: NVD
DT
Deebot T8 Firmware · Ecovacs
All versions, or not specified · source: NVD
DT
Deebot T9 Firmware · Ecovacs
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-52331
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-52331
Exploit
https://dontvacuum.me/talks/37c3-2023/37c3-vacuuming-and-mowing.pdf
Exploit
https://dontvacuum.me/talks/HITCON2024/HITCON-CMT-2024_Ecovacs.html
More from Unspecified robots
7.6
CVE-2024-11147
ECOVACS lawnmowers and vacuums deterministic root password
6.3
CVE-2024-12078
ECOVACS lawnmowers and vacuums static BLE GATT encryption key
3.3
CVE-2024-12079
ECOVACS lawnmowers cleartext storage of anti-theft PIN
2.3
CVE-2024-52328
ECOVACS lawnmowers and vacuums insecurely store audio warning files