CVSS 4.0
4.8 mediumCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:NCVE-2024-12079
Medium (4.8) in ecovacs. EPSS 0.2% chance of exploitation in the next 30 days.
ECOVACS robot lawnmowers store the anti-theft PIN in cleartext on the device filesystem. An attacker can steal a lawnmower, read the PIN, and reset the anti-theft mechanism.
Severity
CVSS 3.1
3.3 lowCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N- EPSS
- 0.2% chance of exploitation in the next 30 days; higher than 4% of CVEs (scores of 2026-10-31)
- CWE
- CWE-312
- Published
- Modified
- Record from
- the NVD, synced
Affected
- ecovacs:airbot_andy_firmware
- ecovacs:airbot_ava_firmware
- ecovacs:airbot_z1_firmware
- ecovacs:deebot_900_firmware
- ecovacs:deebot_n10_firmware
- ecovacs:deebot_n8_firmware
- ecovacs:deebot_n9_firmware
- ecovacs:deebot_t10_firmware
- ecovacs:deebot_t20_firmware
- ecovacs:deebot_t8_firmware
- ecovacs:deebot_t9_firmware
- ecovacs:deebot_x1_firmware
- ecovacs:deebot_x2_firmware
- ecovacs:goat_g1_firmware