CVSS 4.0
1.8 lowCVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:L/VA:N/SC:L/SI:N/SA:NCVE-2024-52328
Low (1.8) in ecovacs. EPSS 0.2% chance of exploitation in the next 30 days.
ECOVACS robot lawnmowers and vacuums insecurely store audio files used to indicate that the camera is on. An attacker with access to the /data filesystem can delete or modify warning files such that users may not be aware that the camera is on.
Severity
CVSS 3.1
2.3 lowCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N- EPSS
- 0.2% chance of exploitation in the next 30 days; higher than 11% of CVEs (scores of 2026-10-31)
- CWE
- CWE-732
- Published
- Modified
- Record from
- the NVD, synced
Affected
- ecovacs:airbot_andy_firmware
- ecovacs:airbot_ava_firmware
- ecovacs:airbot_z1_firmware
- ecovacs:deebot_900_firmware
- ecovacs:deebot_n10_firmware
- ecovacs:deebot_n8_firmware
- ecovacs:deebot_n9_firmware
- ecovacs:deebot_t10_firmware
- ecovacs:deebot_t20_firmware
- ecovacs:deebot_t8_firmware
- ecovacs:deebot_t9_firmware
- ecovacs:deebot_x1_firmware
- ecovacs:deebot_x2_firmware
- ecovacs:goat_g1_firmware