Vendor/product archive

ecovacs / deebot_x2_combo CVEs

Beta · best-effort

2 CVEs tagged to ecovacs / deebot_x2_combo — 1 Critical, 0 High, 1 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to ecovacs vendor archive

CVE-2024-52330

Published Jan 23, 2025

ECOVACS lawnmowers and vacuums do not properly validate TLS certificates. An unauthenticated attacker can read or modify TLS traffic, possibly modifying firmware updates.

CVSS 9.5 · Critical

Vendor/product tagsBeta · best-effort

CVE-2024-52325

Published Jan 23, 2025

ECOVACS robot lawnmowers and vacuums are vulnerable to command injection via SetNetPin() over an unauthenticated BLE connection.

CVSS 5.8 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-2 of 2 CVEsPage 1 of 1