Skip to content
CVE PROGRAM SOURCE RECORD7.7 High

CVE-2024-52331

ECOVACS lawnmowers and vacuums deterministic firmware encryption key

Description

ECOVACS robot lawnmowers and vacuums use a deterministic symmetric key to decrypt firmware updates. An attacker can create and encrypt malicious firmware that will be successfully decrypted and installed by the robot.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ECOVACS Unspecified robots

Default version status: unknown

  • *affected

References