Description
ECOVACS vacuum robot base stations do not validate firmware updates, so malicious over-the-air updates can be sent to base station via insecure connection between robot and base station.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
ECOVACS DEEBOT X1 Series
Default version status: unknown
*affected
ECOVACS DEEBOT T20 Series
Default version status: unknown
*affected
ECOVACS DEEBOT T10 Series
Default version status: unknown
*affected
ECOVACS DEEBOT T30 Series
Default version status: unknown
*affected