by Kastro
Paper/Archive/CVE-2024-52325

CVE-2024-52325

ECOVACS GOAT G1 — ECOVACS robot lawnmowers and vacuums command injection

EPSS 3%CVSS 9.6
critical.is priorityof 100
46
CVSS 9.6 (CNA)9.6 / 10 × 3028.8Not in CISA KEV+300.0EPSS percentile 87.9.879 × 2017.6No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

ECOVACS robot lawnmowers and vacuums are vulnerable to command injection via SetNetPin() over an unauthenticated BLE connection.

Affected

ProductAffectedFixed inSource
GOAT G1< 1.36.1871.36.187CNA
GOAT G1-800< 1.36.1871.36.187CNA
DEEBOT X2S< 1.49.01.49.0CNA
DEEBOT X5 PRO< 1.70.01.70.0CNA
DEEBOT X5 PRO PLUS< 1.38.01.38.0CNA
DEEBOT T30 OMNI< 1.93.01.93.0CNA
DEEBOT T30S< 1.95.01.95.0CNA
GOAT G1-2000< 1.36.1871.36.187CNA
GOAT GX-600< 1.2.1201.2.120CNA
DEEBOT X2 OMNI< 1.76.61.76.6CNA
DEEBOT X2 COMBO< 1.81.101.81.10CNA
DEEBOT X5 PRO ULTRA< 1.17.01.17.0CNA

Scores by source

cisa-cg (CNA)9.6CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
cisa-cg (CNA)5.8CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refdontvacuum.me/talks/DEFCON32/DEFCON32_reveng_hacking_ecovacs_robots.pdfrefyoutu.be/_wUsM0Mlenc?t=2041refecovacs.com/global/userhelp/dsa20241130001refecovacs.com/global/userhelp/dsa20241119