CVEs (2)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Ecovacs 20Deebot T10 Firmware Deebot T10 Omni FirmwareDeebot T10 Plus Firmware+17 moreJun 17, 2026 Jan 23, 2025 9.5 CRITICAL· v4 7.4 HIGH· v3 N/A· v2 ECOVACS lawnmowers and vacuums do not properly validate TLS certificates. An unauthenticated attacker can read or modify TLS traffic, possibly modifying firmware updates. |
1Ecovacs 12Deebot T30 Omni Firmware Deebot T30s FirmwareDeebot X2 Combo Firmware+9 moreJun 17, 2026 Jan 23, 2025 5.8 MEDIUM· v4 9.6 CRITICAL· v3 N/A· v2 ECOVACS robot lawnmowers and vacuums are vulnerable to command injection via SetNetPin() over an unauthenticated BLE connection. |