Ecovacs: Security Vulnerabilities
ECOVACS robot lawnmowers and vacuums use a deterministic root password generated based on model and serial number. An attacker with shell access can login as root.
CVSS Score
7.6
EPSS Score
0.001
Published
2025-01-23
ECOVACS robot lawnmowers and vacuums are vulnerable to command injection via SetNetPin() over an unauthenticated BLE connection.
CVSS Score
9.6
EPSS Score
0.021
Published
2025-01-23
Page 2