← Database
CVE-2024-52331
HIGH
CVSS: 7.5
Published: 2025-01-23
Modified: 2026-06-17
Description
ECOVACS robot lawnmowers and vacuums use a deterministic symmetric key to decrypt firmware updates. An attacker can create and encrypt malicious firmware that will be successfully decrypted and installed by the robot.
Affected Platforms
Ecovacs Deebot T8 FirmwareEcovacs Deebot N9 FirmwareEcovacs Airbot Z1 FirmwareEcovacs Deebot 900 FirmwareEcovacs Deebot X2Ecovacs Deebot N10 FirmwareEcovacs Airbot Ava FirmwareEcovacs Deebot T10Ecovacs Airbot AndyEcovacs Deebot T20 Firmware
Weakness Type
CWE-327, CWE-494, CWE-1391