← Database
CVE-2024-52328
LOW
CVSS: 2.3
Published: 2025-01-23
Modified: 2026-06-17
Description
ECOVACS robot lawnmowers and vacuums insecurely store audio files used to indicate that the camera is on. An attacker with access to the /data filesystem can delete or modify warning files such that users may not be aware that the camera is on.
Affected Platforms
Ecovacs Deebot T8 FirmwareEcovacs Deebot N9 FirmwareEcovacs Airbot Z1 FirmwareEcovacs Deebot 900 FirmwareEcovacs Deebot X2Ecovacs Deebot N10 FirmwareEcovacs Airbot Ava FirmwareEcovacs Deebot T10Ecovacs Airbot AndyEcovacs Deebot T20 Firmware