CVE-2024-11147
HIGH EPSS 31.2%
Published Jan 23, 20251y ago · Modified Jun 17, 20262w ago
7.0 CVSS 4.0
Published Jan 23, 2025 1y ago
Last Modified Jun 17, 2026 2w ago
Description
ECOVACS robot lawnmowers and vacuums use a deterministic root password generated based on model and serial number. An attacker with shell access can login as root.
CVSS Details
Base Score
Exploitability
Impact
Vector string
CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Attack Vector Physical
Attack Complexity Low
Privileges Required None
User Interaction None
Scope X
Threat Intelligence
EPSS Exploit Probability
31.2% percentile
Exploit & Patch Status
Public Exploit Known
No Patch Available
Weaknesses 1
CWE-798 Use of Hard-coded Credentials Authentication
Affected Products 28
| Vendor | Product | Version | Range |
|---|---|---|---|
| ecovacs | deebot_900_firmware | * | any |
| ecovacs | deebot_900 | * | any |
| ecovacs | deebot_n8_firmware | * | any |
| ecovacs | deebot_n8 | * | any |
| ecovacs | deebot_t8_firmware | * | any |
| ecovacs | deebot_t8 | * | any |
| ecovacs | deebot_n9_firmware | * | any |
| ecovacs | deebot_n9 | * | any |
| ecovacs | deebot_t9_firmware | * | any |
| ecovacs | deebot_t9 | * | any |
| ecovacs | deebot_n10_firmware | * | any |
| ecovacs | deebot_n10 | * | any |
| ecovacs | deebot_t10_firmware | * | any |
| ecovacs | deebot_t10 | * | any |
| ecovacs | deebot_x1_firmware | * | any |
| ecovacs | deebot_x1 | * | any |
| ecovacs | deebot_t20_firmware | * | any |
| ecovacs | deebot_t20 | * | any |
| ecovacs | deebot_x2_firmware | * | any |
| ecovacs | deebot_x2 | * | any |
| ecovacs | goat_g1_firmware | * | any |
| ecovacs | goat_g1 | * | any |
| ecovacs | airbot_z1_firmware | * | any |
| ecovacs | airbot_z1 | * | any |
| ecovacs | airbot_ava_firmware | * | any |
| ecovacs | airbot_ava | * | any |
| ecovacs | airbot_andy_firmware | * | any |
| ecovacs | airbot_andy | * | any |
References 3
- builder.dontvacuum.me https://builder.dontvacuum.me/ecopassword.php
- dontvacuum.me https://dontvacuum.me/talks/37c3-2023/37c3-vacuuming-and-mowing.pdf
- dontvacuum.me https://dontvacuum.me/talks/HITCON2024/HITCON-CMT-2024_Ecovacs.pdf
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.