Ecovacs Deebot t20 Firmware vulnerabilities

5 CVEs affecting Ecovacs Deebot t20 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-52331, published 2025-01-23.

More from Ecovacs.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-11147, published 2025-01-23. High severity, CVSS 7.6. EPSS: 0.4% chance of exploitation in the next 30 days. ECOVACS robot lawnmowers and vacuums use a deterministic root password generated based on model and serial number. An attacker with shell access can login as root.
• CVE-2024-12078, published 2025-01-23. Medium severity, CVSS 6.3. EPSS: 0.3% chance of exploitation in the next 30 days. ECOVACS robot lawn mowers and vacuums use a shared, static secret key to encrypt BLE GATT messages. An unauthenticated attacker within BLE range can control any robot using the same key.
• CVE-2024-52331, published 2025-01-23. High severity, CVSS 7.5. EPSS: 0.2% chance of exploitation in the next 30 days. ECOVACS robot lawnmowers and vacuums use a deterministic symmetric key to decrypt firmware updates. An attacker can create and encrypt malicious firmware that will be successfully decrypted and…
• CVE-2024-52328, published 2025-01-23. Low severity, CVSS 2.3. EPSS: 0.2% chance of exploitation in the next 30 days. ECOVACS robot lawnmowers and vacuums insecurely store audio files used to indicate that the camera is on. An attacker with access to the /data filesystem can delete or modify warning files such that…
• CVE-2024-12079, published 2025-01-23. Low severity, CVSS 3.3. EPSS: 0.2% chance of exploitation in the next 30 days. ECOVACS robot lawnmowers store the anti-theft PIN in cleartext on the device filesystem. An attacker can steal a lawnmower, read the PIN, and reset the anti-theft mechanism.