CVE-2024-52327: Ecovacs Home

Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days.

The cloud service used by ECOVACS robot lawnmowers and vacuums allows authenticated attackers to bypass the PIN entry required to access the live video feed.

Affected products

• Ecovacs Home: before 3.0.2 (fixed in 3.0.2)

Published 2025-01-23. Last modified 2026-06-17.