VULNERABILITY INTELLIGENCE

CVE-2024-12078

CVSS score6.3 MEDIUM
EPSS probability0.34%
CISA KEVNot currently listed
Published2025-01-23
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Description

ECOVACS robot lawn mowers and vacuums use a shared, static secret key to encrypt BLE GATT messages. An unauthenticated attacker within BLE range can control any robot using the same key.

Weakness classification

  • 9119a7d8-5eab-497f-8521-727c672e3725: CWE-321

Primary references