Skip to content
CVE PROGRAM SOURCE RECORD9.5 Critical

CVE-2024-52330

ECOVACS lawnmowers and vacuums do not properly validate TLS certificates

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
cisa-cg

Description

ECOVACS lawnmowers and vacuums do not properly validate TLS certificates. An unauthenticated attacker can read or modify TLS traffic, possibly modifying firmware updates.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ECOVACS DEEBOT X5 PRO PLUS

Default version status: unknown

  • 1.38.0unaffected
  • 0 to < 1.38.0affected

ECOVACS DEEBOT X5 PRO

Default version status: unknown

  • 1.70.0unaffected
  • 0 to < 1.70.0affected

ECOVACS DEEBOT X2S

Default version status: unknown

  • 0 to < 1.49.0affected
  • 1.49.0unaffected

ECOVACS DEEBOT X2 OMNI

Default version status: unknown

  • 1.76.6unaffected
  • 0 to < 1.76.6affected

ECOVACS DEEBOT X1 TURBO

Default version status: unknown

  • 0 to < 2.4.41affected
  • 2.4.41unaffected

ECOVACS DEEBOT X1

Default version status: unknown

  • 1.7.3unaffected
  • 0 to < 1.7.3affected

ECOVACS DEEBOT X1S PRO

Default version status: unknown

  • 2.5.31unaffected
  • 0 to < 2.5.31affected

ECOVACS DEEBOT X1e OMNI

Default version status: unknown

  • 2.4.42unaffected
  • 0 to < 2.4.42affected

ECOVACS DEEBOT T10 PLUS

Default version status: unknown

  • 1.7.5unaffected
  • 0 to < 1.7.5affected

ECOVACS DEEBOT T10 OMNI

Default version status: unknown

  • 0 to < 1.9.0affected
  • 1.9.0unaffected

ECOVACS DEEBOT X5 PRO ULTRA

Default version status: unknown

  • 0 to < 1.17.0affected
  • 1.17.0unaffected

ECOVACS Mate X

Default version status: unknown

  • 1.44.18unaffected
  • 0 to < 1.44.18affected

ECOVACS DEEBOT X2 PRO

Default version status: unknown

  • 1.76.6unaffected
  • 0 to < 1.76.6affected

ECOVACS DEEBOT X2 COMBO

Default version status: unknown

  • 0 to < 1.81.10affected
  • 1.81.10unaffected

ECOVACS DEEBOT X1 OMNI

Default version status: unknown

  • 0 to < 2.4.41affected
  • 2.4.41unaffected

ECOVACS DEEBOT X1 PRO OMNI

Default version status: unknown

  • 2.4.41unaffected
  • 0 to < 2.4.41affected

ECOVACS DEEBOT X1 PLUS

Default version status: unknown

  • 1.7.3unaffected
  • 0 to < 1.7.3affected

ECOVACS DEEBOT X1S PRO PLUS

Default version status: unknown

  • 1.23.0unaffected
  • 0 to < 1.23.0affected

ECOVACS DEEBOT T10 TURBO

Default version status: unknown

  • 1.10.0unaffected
  • 0 to < 1.10.0affected

ECOVACS DEEBOT T10

Default version status: unknown

  • 0 to < 1.7.5affected
  • 1.7.5unaffected

References