High severity · published Jan 23, 2025
CVE-2024-11147
ECOVACS lawnmowers and vacuums deterministic root password
7.6
CVSS
0.4%
EPSS
No
On KEV
Description
ECOVACS robot lawnmowers and vacuums use a deterministic root password generated based on model and serial number. An attacker with shell access can login as root.
CVSS vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Attack vector
Physical
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 34% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
UR
Unspecified robots · ECOVACS
All versions, or not specified · source: vendor
AA
Airbot Andy Firmware · Ecovacs
All versions, or not specified · source: NVD
AA
Airbot Ava Firmware · Ecovacs
All versions, or not specified · source: NVD
AZ
Airbot Z1 Firmware · Ecovacs
All versions, or not specified · source: NVD
D9
Deebot 900 Firmware · Ecovacs
All versions, or not specified · source: NVD
DN
Deebot N10 Firmware · Ecovacs
All versions, or not specified · source: NVD
DN
Deebot N8 Firmware · Ecovacs
All versions, or not specified · source: NVD
DN
Deebot N9 Firmware · Ecovacs
All versions, or not specified · source: NVD
DT
Deebot T10 Firmware · Ecovacs
All versions, or not specified · source: NVD
DT
Deebot T20 Firmware · Ecovacs
All versions, or not specified · source: NVD
DT
Deebot T8 Firmware · Ecovacs
All versions, or not specified · source: NVD
DT
Deebot T9 Firmware · Ecovacs
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-11147
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-11147
Product
https://builder.dontvacuum.me/ecopassword.php
Exploit
https://dontvacuum.me/talks/37c3-2023/37c3-vacuuming-and-mowing.pdf
Exploit
https://dontvacuum.me/talks/HITCON2024/HITCON-CMT-2024_Ecovacs.pdf
More from Unspecified robots
7.5
CVE-2024-52331
ECOVACS lawnmowers and vacuums deterministic firmware encryption key
6.3
CVE-2024-12078
ECOVACS lawnmowers and vacuums static BLE GATT encryption key
3.3
CVE-2024-12079
ECOVACS lawnmowers cleartext storage of anti-theft PIN
2.3
CVE-2024-52328
ECOVACS lawnmowers and vacuums insecurely store audio warning files