CVE-2024-52325 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

ECOVACS robot lawnmowers and vacuums are vulnerable to command injection via SetNetPin() over an unauthenticated BLE connection.
Medium CVSS: 5.8

CVE-2024-52325

ECOVACS robot lawnmowers and vacuums are vulnerable to command injection via SetNetPin() over an unauthenticated BLE connection.
Vendor
Ecovacs
Product
Goat G1-2000 Firmware
CWE
CWE-77
Yayın Tarihi
2025-01-23 16:15:35
Güncelleme
2025-09-23 17:35:35
Source Identifier
9119a7d8-5eab-497f-8521-727c672e3725
KEV Date Added
-

Kategoriler

CWE-77 Goat G1-2000 Firmware MEDIUM Ecovacs 2025

Referanslar

https://dontvacuum.me/talks/DEFCON32/DEFCON32_reveng_hacking_ecovacs_robots.pdf https://www.ecovacs.com/global/userhelp/dsa20241119 https://www.ecovacs.com/global/userhelp/dsa20241130001 https://youtu.be/_wUsM0Mlenc?t=2041