CVE-2024-52331

HIGH
2025-01-23 9119a7d8-5eab-497f-8521-727c672e3725
Information Disclosure Deebot 900 Firmware Deebot N8 Firmware Deebot T8 Firmware Deebot N9 Firmware Deebot T9 Firmware Deebot N10 Firmware Deebot T10 Firmware Deebot X1 Firmware Deebot T20 Firmware Deebot X2 Firmware Goat G1 Firmware Airbot Z1 Firmware Airbot Ava Firmware Airbot Andy Firmware
7.7
CVSS 4.0
Share

CVSS Vector

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
P
Scope
X

Lifecycle Timeline

3
Analysis Generated
Mar 28, 2026 - 18:05 vuln.today
PoC Detected
Oct 02, 2025 - 15:15 vuln.today
Public exploit code
CVE Published
Jan 23, 2025 - 17:15 nvd
HIGH 7.7

Description

ECOVACS robot lawnmowers and vacuums use a deterministic symmetric key to decrypt firmware updates. An attacker can create and encrypt malicious firmware that will be successfully decrypted and installed by the robot.

Analysis

ECOVACS robot lawnmowers and vacuums use a deterministic symmetric key to decrypt firmware updates. Rated high severity (CVSS 7.7), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Technical Context

This vulnerability is classified under CWE-327. ECOVACS robot lawnmowers and vacuums use a deterministic symmetric key to decrypt firmware updates. An attacker can create and encrypt malicious firmware that will be successfully decrypted and installed by the robot. Affected products include: Ecovacs Deebot 900 Firmware, Ecovacs Deebot N8 Firmware, Ecovacs Deebot T8 Firmware, Ecovacs Deebot N9 Firmware, Ecovacs Deebot T9 Firmware.

Affected Products

Ecovacs Deebot 900 Firmware, Ecovacs Deebot N8 Firmware, Ecovacs Deebot T8 Firmware, Ecovacs Deebot N9 Firmware, Ecovacs Deebot T9 Firmware.

Remediation

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

Share

CVE-2024-52331 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy