← Database

CVE-2024-52325

CRITICAL CVSS: 9.6 Published: 2025-01-23 Modified: 2026-06-17

Description

ECOVACS robot lawnmowers and vacuums are vulnerable to command injection via SetNetPin() over an unauthenticated BLE connection.

Affected Platforms

Ecovacs Deebot X2 OmniEcovacs Deebot T30S FirmwareEcovacs Gx-600Ecovacs Goat G1-800 FirmwareEcovacs Deebot T30 OmniEcovacs Goat G1-2000Ecovacs Deebot X5 Pro Plus FirmwareEcovacs Deebot X2 Omni FirmwareEcovacs Deebot X5 Pro Ultra FirmwareEcovacs Goat G1-800

Weakness Type

CWE-77

References