Deebot X1S Pro Plus Firmware
1 CVEs
product
Monthly
ECOVACS lawnmowers and vacuums do not properly validate TLS certificates. Rated critical severity (CVSS 9.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Information Disclosure
Deebot X2 Omni Firmware
Deebot X2 Combo Firmware
Deebot X2S Firmware
Deebot X5 Pro Firmware
+16
NVD
CVSS 4.0
9.5
EPSS
0.7%
EPSS 1%
CVSS 9.5
CRITICAL
POC
Act Now
ECOVACS lawnmowers and vacuums do not properly validate TLS certificates. Rated critical severity (CVSS 9.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Information Disclosure
Deebot X2 Omni Firmware
Deebot X2 Combo Firmware
+18
NVD