6.3

CVE-2024-12078

Exploit

ECOVACS lawnmowers and vacuums static BLE GATT encryption key

ECOVACS robot lawn mowers and vacuums use a shared, static secret key to encrypt BLE GATT messages. An unauthenticated attacker within BLE range can control any robot using the same key.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ecovacs ≫ Deebot N10 Firmware Version -
   Ecovacs ≫ Deebot N10 Version -
Ecovacs ≫ Deebot T10 Firmware Version -
   Ecovacs ≫ Deebot T10 Version -
Ecovacs ≫ Deebot X1 Firmware Version -
   Ecovacs ≫ Deebot X1 Version -
Ecovacs ≫ Deebot T20 Firmware Version -
   Ecovacs ≫ Deebot T20 Version -
Ecovacs ≫ Deebot X2 Firmware Version -
   Ecovacs ≫ Deebot X2 Version -
Ecovacs ≫ Goat G1 Firmware Version -
   Ecovacs ≫ Goat G1 Version -
Ecovacs ≫ Airbot Z1 Firmware Version -
   Ecovacs ≫ Airbot Z1 Version -
Ecovacs ≫ Airbot Ava Firmware Version -
   Ecovacs ≫ Airbot Ava Version -
Ecovacs ≫ Airbot Andy Firmware Version -
   Ecovacs ≫ Airbot Andy Version -
Ecovacs ≫ Deebot 900 Firmware Version -
   Ecovacs ≫ Deebot 900 Version -
Ecovacs ≫ Deebot N8 Firmware Version -
   Ecovacs ≫ Deebot N8 Version -
Ecovacs ≫ Deebot T8 Firmware Version -
   Ecovacs ≫ Deebot T8 Version -
Ecovacs ≫ Deebot N9 Firmware Version -
   Ecovacs ≫ Deebot N9 Version -
Ecovacs ≫ Deebot T9 Firmware Version -
   Ecovacs ≫ Deebot T9 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.33% 0.255
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
cisa-cg 5.3 0 0
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
cisa-cg 6.3 2.8 3.4
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CWE-321 Use of Hard-coded Cryptographic Key

The product uses a hard-coded, unchangeable cryptographic key.

https://youtu.be/_wUsM0Mlenc?t=2041
Exploit
https://dontvacuum.me/talks/37c3-2023/37c3-vacuuming-and-mowing.pdf
Third Party Advisory
Exploit