by Kastro
Paper/Archive/CVE-2024-52330

CVE-2024-52330

ECOVACS DEEBOT X5 PRO PLUS — ECOVACS lawnmowers and vacuums do not properly validate TLS certificates

EPSS 0.4%public exploitCVSS 9.5
critical.is priorityof 100
44
CVSS 9.5 (CNA)9.5 / 10 × 3028.5Not in CISA KEV+300.0EPSS percentile 28.8.288 × 205.8Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

ECOVACS lawnmowers and vacuums do not properly validate TLS certificates. An unauthenticated attacker can read or modify TLS traffic, possibly modifying firmware updates.

Affected

ProductAffectedFixed inSource
DEEBOT X5 PRO PLUS< 1.38.01.38.0CNA
DEEBOT X5 PRO< 1.70.01.70.0CNA
DEEBOT X2S< 1.49.01.49.0CNA
DEEBOT X2 OMNI< 1.76.61.76.6CNA
DEEBOT X1 TURBO< 2.4.412.4.41CNA
DEEBOT X1< 1.7.31.7.3CNA
DEEBOT X1S PRO< 2.5.312.5.31CNA
DEEBOT X1e OMNI< 2.4.422.4.42CNA
DEEBOT T10 PLUS< 1.7.51.7.5CNA
DEEBOT T10 OMNI< 1.9.01.9.0CNA
DEEBOT X5 PRO ULTRA< 1.17.01.17.0CNA
Mate X< 1.44.181.44.18CNA

Scores by source

cisa-cg (CNA)9.5CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:H
cisa-cg (CNA)7.4CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
CISA ADPSSVCExploitation: poc · Automatable: no · Technical impact: total

References

refdontvacuum.me/talks/HITCON2024/HITCON-CMT-2024_Ecovacs.pdfrefdontvacuum.me/talks/37c3-2023/37c3-vacuuming-and-mowing.pdfrefecovacs.com/global/userhelp/dsa20241217001