Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2024-52327

ECOVACS lawnmower and vacuum cloud service live video PIN bypass

The cloud service used by ECOVACS robot lawnmowers and vacuums allows authenticated attackers to bypass the PIN entry required to access the live video feed.

CVSS 4.0 · 6 Medium EPSS < 1% KEV · Not listed
Vendors
Ecovacs
Products
Home
CVE-2024-52329

ECOVACS HOME mobile app plugins do not properly validate TLS certificates

ECOVACS HOME mobile app plugins for specific robots do not properly validate TLS certificates. An unauthenticated attacker can read or modify TLS traffic and obtain authentication tokens.

CVSS 4.0 · 9.5 Critical EPSS < 1% KEV · Not listed
Vendors
Ecovacs
Products
Home