Approved changes feed: RSS · Atom

cpe:2.3:h:ecovacs:deebot_x5_pro_ultra:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorEcovacs (970385e2-1d45-53ea-a811-676ddc52336f)
ProductDeebot X5 Pro Ultra (6755d8a6-f1e2-5a1f-8c9b-8454c4dbf58f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-52330 not_vulnerable 2026-06-03 14:57:29.138751 ECOVACS lawnmowers and vacuums do not properly validate TLS certificates
HIGH (7.4)
ECOVACS lawnmowers and vacuums do not properly validate TLS certificates. An unauthenticated attacker can read or modify TLS traffic, possibly modifying firmware updates.
Published: 2025-01-23T16:36:50.128Z
Updated: 2025-02-12T20:41:28.969Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-52325 not_vulnerable 2026-06-03 14:57:29.091764 ECOVACS robot lawnmowers and vacuums command injection
CRITICAL (9.6)
ECOVACS robot lawnmowers and vacuums are vulnerable to command injection via SetNetPin() over an unauthenticated BLE connection.
Published: 2025-01-23T15:56:30.185Z
Updated: 2025-02-12T20:41:26.651Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.