VULNERABILITY INTELLIGENCE

CVE-2024-52328

CVSS score2.3 LOW
EPSS probability0.21%
CISA KEVNot currently listed
Published2025-01-23
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N

Description

ECOVACS robot lawnmowers and vacuums insecurely store audio files used to indicate that the camera is on. An attacker with access to the /data filesystem can delete or modify warning files such that users may not be aware that the camera is on.

Weakness classification

  • 9119a7d8-5eab-497f-8521-727c672e3725: CWE-732

Primary references