Ecovacs Home
Approved changes feed: RSS · Atom
cpe:2.3:a:ecovacs:ecovacs_home:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Ecovacs (970385e2-1d45-53ea-a811-676ddc52336f) |
|---|---|
| Product | Ecovacs Home (e66708d8-5600-5cac-8e5c-e8f237a10215) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-52329 |
not_vulnerable | 2026-06-08 06:52:14.864523 |
ECOVACS HOME mobile app plugins do not properly validate TLS certificates
HIGH (7.4)
ECOVACS HOME mobile app plugins for specific robots do not properly validate TLS certificates. An unauthenticated attacker can read or modify TLS traffic and obtain authentication tokens.
Published: 2025-01-23T16:36:06.533Z
Updated: 2025-02-12T20:41:29.110Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-52327 |
vulnerable | 2026-06-08 06:52:14.843885 |
ECOVACS lawnmower and vacuum cloud service live video PIN bypass
MEDIUM (6.5)
The cloud service used by ECOVACS robot lawnmowers and vacuums allows authenticated attackers to bypass the PIN entry required to access the live video feed.
Published: 2025-01-23T16:39:27.516Z
Updated: 2025-02-12T20:41:28.703Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.