Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2024-12078

ECOVACS lawnmowers and vacuums static BLE GATT encryption key

Description

ECOVACS robot lawn mowers and vacuums use a shared, static secret key to encrypt BLE GATT messages. An unauthenticated attacker within BLE range can control any robot using the same key.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ECOVACS Unspecified robots

Default version status: unknown

  • *affected

References