CVE-2024-12078

Published: Jan 23, 2025Modified: Jun 17, 2026

5.3

Vector

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow less

Source: 9119a7d8-5eab-497f-8521-727c672e3725 (Secondary)

Description

ECOVACS robot lawn mowers and vacuums use a shared, static secret key to encrypt BLE GATT messages. An unauthenticated attacker within BLE range can control any robot using the same key.

Affected (14)

Products: Ecovacs: Deebot N10 Firmware, Deebot T10 Firmware, Deebot X1 Firmware, Deebot T20 Firmware, Deebot X2 Firmware, Goat G1 Firmware, Airbot Z1 Firmware, Airbot Ava Firmware, Airbot Andy Firmware, Deebot 900 Firmware, Deebot N8 Firmware, Deebot T8 Firmware, Deebot N9 Firmware, Deebot T9 Firmware

14 products

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ecovacs Deebot N10 Firmware	All versions

Running on/with	Platform Versions
Ecovacs Deebot N10	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ecovacs Deebot T10 Firmware	All versions

Running on/with	Platform Versions
Ecovacs Deebot T10	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ecovacs Deebot X1 Firmware	All versions

Running on/with	Platform Versions
Ecovacs Deebot X1	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ecovacs Deebot T20 Firmware	All versions

Running on/with	Platform Versions
Ecovacs Deebot T20	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ecovacs Deebot X2 Firmware	All versions

Running on/with	Platform Versions
Ecovacs Deebot X2	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ecovacs Goat G1 Firmware	All versions

Running on/with	Platform Versions
Ecovacs Goat G1	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ecovacs Airbot Z1 Firmware	All versions

Running on/with	Platform Versions
Ecovacs Airbot Z1	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ecovacs Airbot Ava Firmware	All versions

Running on/with	Platform Versions
Ecovacs Airbot Ava	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ecovacs Airbot Andy Firmware	All versions

Running on/with	Platform Versions
Ecovacs Airbot Andy	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ecovacs Deebot 900 Firmware	All versions

Running on/with	Platform Versions
Ecovacs Deebot 900	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ecovacs Deebot N8 Firmware	All versions

Running on/with	Platform Versions
Ecovacs Deebot N8	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ecovacs Deebot T8 Firmware	All versions

Running on/with	Platform Versions
Ecovacs Deebot T8	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ecovacs Deebot N9 Firmware	All versions

Running on/with	Platform Versions
Ecovacs Deebot N9	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ecovacs Deebot T9 Firmware	All versions

Running on/with	Platform Versions
Ecovacs Deebot T9	All versions

Related CWEs

CWE-321

Use of Hard-coded Cryptographic Key

The use of a hard-coded cryptographic key significantly increases the possibility that encrypted data may be recovered.

References (2)

https://dontvacuum.me/talks/37c3-2023/37c3-vacuuming-and-mowing.pdf

Source: 9119a7d8-5eab-497f-8521-727c672e3725

ExploitThird Party Advisory

https://youtu.be/_wUsM0Mlenc?t=2041

Source: 9119a7d8-5eab-497f-8521-727c672e3725

Exploit

Timeline

No history available yet.