Skip to content
CVE PROGRAM SOURCE RECORD9.5 Critical

CVE-2024-52329

ECOVACS HOME mobile app plugins do not properly validate TLS certificates

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
cisa-cg

Description

ECOVACS HOME mobile app plugins for specific robots do not properly validate TLS certificates. An unauthenticated attacker can read or modify TLS traffic and obtain authentication tokens.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ECOVACS ECOVACS HOME

Default version status: unknown

  • 3.0.0unaffected
  • 0 to < 3.0.0affected

References