Approved changes feed: RSS · Atom

cpe:2.3:a:ecovacs:deebot_x5_pro_ultra:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorEcovacs (970385e2-1d45-53ea-a811-676ddc52336f)
ProductDeebot X5 Pro Ultra (6755d8a6-f1e2-5a1f-8c9b-8454c4dbf58f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-52330 vulnerable 2026-06-08 06:52:14.870204 ECOVACS lawnmowers and vacuums do not properly validate TLS certificates
HIGH (7.4)
ECOVACS lawnmowers and vacuums do not properly validate TLS certificates. An unauthenticated attacker can read or modify TLS traffic, possibly modifying firmware updates.
Published: 2025-01-23T16:36:50.128Z
Updated: 2025-02-12T20:41:28.969Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-52325 vulnerable 2026-06-08 06:52:14.827050 ECOVACS robot lawnmowers and vacuums command injection
CRITICAL (9.6)
ECOVACS robot lawnmowers and vacuums are vulnerable to command injection via SetNetPin() over an unauthenticated BLE connection.
Published: 2025-01-23T15:56:30.185Z
Updated: 2025-02-12T20:41:26.651Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.