CVE-2024-11147

🗓️ 23 Jan 2025 16:37:54Reported by cisa-cgType

ECOVACS lawnmowers and vacuums use a fixed root password vulnerable to unauthorized access.

Reporter	Title	Published	Views	Family All 7
Circl	CVE-2024-11147	23 Jan 202517:15	–	circl
CNNVD	ECOVACS robot lawnmowers和vacuums 信任管理问题漏洞	23 Jan 202500:00	–	cnnvd
Cvelist	CVE-2024-11147 ECOVACS lawnmowers and vacuums deterministic root password	23 Jan 202516:37	–	cvelist
EUVD	EUVD-2024-34389	3 Oct 202520:07	–	euvd
NVD	CVE-2024-11147	23 Jan 202517:15	–	nvd
Positive Technologies	PT-2025-1627 · Ecovacs · Ecovacs Robot Lawnmowers/Vacuums	23 Jan 202500:00	–	ptsecurity
Vulnrichment	CVE-2024-11147 ECOVACS lawnmowers and vacuums deterministic root password	23 Jan 202516:37	–	vulnrichment

NVD

Node

ecovacs deebot_900_firmwareMatch-

AND

ecovacs deebot_900Match-

Node

ecovacs deebot_n8_firmwareMatch-

AND

ecovacs deebot_n8Match-

Node

ecovacs deebot_t8_firmwareMatch-

AND

ecovacs deebot_t8Match-

Node

ecovacs deebot_n9_firmwareMatch-

AND

ecovacs deebot_n9Match-

Node

ecovacs deebot_t9_firmwareMatch-

AND

ecovacs deebot_t9Match-

Node

ecovacs deebot_n10_firmwareMatch-

AND

ecovacs deebot_n10Match-

Node

ecovacs deebot_t10_firmwareMatch-

AND

ecovacs deebot_t10Match-

Node

ecovacs deebot_x1_firmwareMatch-

AND

ecovacs deebot_x1Match-

Node

ecovacs deebot_t20_firmwareMatch-

AND

ecovacs deebot_t20Match-

Node

ecovacs deebot_x2_firmwareMatch-

AND

ecovacs deebot_x2Match-

Node

ecovacs goat_g1_firmwareMatch-

AND

ecovacs goat_g1Match-

Node

ecovacs airbot_z1_firmwareMatch-

AND

ecovacs airbot_z1Match-

Node

ecovacs airbot_ava_firmwareMatch-

AND

ecovacs airbot_avaMatch-

Node

ecovacs airbot_andy_firmwareMatch-

AND

ecovacs airbot_andyMatch-

[
  {
    "vendor": "ECOVACS",
    "product": "Unspecified robots",
    "defaultStatus": "unknown",
    "versions": [
      {
        "version": "*",
        "status": "affected"
      }
    ]
  }
]

Source	Link
builder	www.builder.dontvacuum.me/ecopassword.php
dontvacuum	www.dontvacuum.me/talks/HITCON2024/HITCON-CMT-2024_Ecovacs.pdf
dontvacuum	www.dontvacuum.me/talks/37c3-2023/37c3-vacuuming-and-mowing.pdf

23 Sep 2025 17:44Current

7.6High risk

Vulners AI Score7.6

CVSS 47

CVSS 3.17.6

EPSS0.00112

SSVC

CWE-798