CVE-2024-52325

🗓️ 23 Jan 2025 15:56:30Reported by cisa-cgType

ECOVACS robot lawnmowers and vacuums have a command injection vulnerability via BLE connection.

Reporter	Title	Published	Views	Family All 7
Circl	CVE-2024-52325	23 Jan 202516:01	–	circl
CNNVD	ECOVACS robot lawnmowers和vacuums 命令注入漏洞	23 Jan 202500:00	–	cnnvd
Cvelist	CVE-2024-52325 ECOVACS robot lawnmowers and vacuums command injection	23 Jan 202515:56	–	cvelist
EUVD	EUVD-2024-46255	3 Oct 202520:07	–	euvd
NVD	CVE-2024-52325	23 Jan 202516:15	–	nvd
Positive Technologies	PT-2025-2924 · Ecovacs · Ecovacs	23 Jan 202500:00	–	ptsecurity
Vulnrichment	CVE-2024-52325 ECOVACS robot lawnmowers and vacuums command injection	23 Jan 202515:56	–	vulnrichment

NVD

Node

ecovacs goat_g1-2000_firmwareRange<1.36.187

AND

ecovacs goat_g1-2000Match-

Node

ecovacs goat_g1_firmwareRange<1.36.187

AND

ecovacs goat_g1Match-

Node

ecovacs goat_g1-800_firmwareRange<1.36.187

AND

ecovacs goat_g1-800Match-

Node

ecovacs gx-600_firmwareRange<1.2.120

AND

ecovacs gx-600Match-

Node

ecovacs deebot_x2_omni_firmwareRange<1.76.6

AND

ecovacs deebot_x2_omniMatch-

Node

ecovacs deebot_x2_combo_firmwareRange<1.81.10

AND

ecovacs deebot_x2_comboMatch-

Node

ecovacs deebot_x2s_firmwareRange<1.49.0

AND

ecovacs deebot_x2sMatch-

Node

ecovacs deebot_x5_pro_firmwareRange<1.70.0

AND

ecovacs deebot_x5_proMatch-

Node

ecovacs deebot_x5_pro_plus_firmwareRange<1.38.0

AND

ecovacs deebot_x5_pro_plusMatch-

Node

ecovacs deebot_x5_pro_ultra_firmwareRange<1.17.0

AND

ecovacs deebot_x5_pro_ultraMatch-

Node

ecovacs deebot_t30_omni_firmwareRange<1.93.0

AND

ecovacs deebot_t30_omniMatch-

Node

ecovacs deebot_t30s_firmwareRange<1.95.0

AND

ecovacs deebot_t30sMatch-

[
  {
    "vendor": "ECOVACS",
    "product": "GOAT G1",
    "defaultStatus": "unknown",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThan": "1.36.187",
        "versionType": "custom"
      },
      {
        "version": "1.36.187",
        "status": "unaffected"
      }
    ]
  },
  {
    "vendor": "ECOVACS",
    "product": "GOAT G1-800",
    "defaultStatus": "unknown",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThan": "1.36.187",
        "versionType": "custom"
      },
      {
        "version": "1.36.187",
        "status": "unaffected"
      }
    ]
  },
  {
    "vendor": "ECOVACS",
    "product": "DEEBOT X2S",
    "defaultStatus": "unknown",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThan": "1.49.0",
        "versionType": "custom"
      },
      {
        "version": "1.49.0",
        "status": "unaffected"
      }
    ]
  },
  {
    "vendor": "ECOVACS",
    "product": "DEEBOT X5 PRO",
    "defaultStatus": "unknown",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThan": "1.70.0",
        "versionType": "custom"
      },
      {
        "version": "1.70.0",
        "status": "unaffected"
      }
    ]
  },
  {
    "vendor": "ECOVACS",
    "product": "DEEBOT X5 PRO PLUS",
    "defaultStatus": "unknown",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThan": "1.38.0",
        "versionType": "custom"
      },
      {
        "version": "1.38.0",
        "status": "unaffected"
      }
    ]
  },
  {
    "vendor": "ECOVACS",
    "product": "DEEBOT T30 OMNI",
    "defaultStatus": "unknown",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThan": "1.93.0",
        "versionType": "custom"
      },
      {
        "version": "1.93.0",
        "status": "unaffected"
      }
    ]
  },
  {
    "vendor": "ECOVACS",
    "product": "DEEBOT T30S",
    "defaultStatus": "unknown",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThan": "1.95.0",
        "versionType": "custom"
      },
      {
        "version": "1.95.0",
        "status": "unaffected"
      }
    ]
  },
  {
    "vendor": "ECOVACS",
    "product": "GOAT G1-2000",
    "defaultStatus": "unknown",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThan": "1.36.187",
        "versionType": "custom"
      },
      {
        "version": "1.36.187",
        "status": "unaffected"
      }
    ]
  },
  {
    "vendor": "ECOVACS",
    "product": "GOAT GX-600",
    "defaultStatus": "unknown",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThan": "1.2.120",
        "versionType": "custom"
      },
      {
        "version": "1.2.120",
        "status": "unaffected"
      }
    ]
  },
  {
    "vendor": "ECOVACS",
    "product": "DEEBOT X2  OMNI",
    "defaultStatus": "unknown",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThan": "1.76.6",
        "versionType": "custom"
      },
      {
        "version": "1.76.6",
        "status": "unaffected"
      }
    ]
  },
  {
    "vendor": "ECOVACS",
    "product": "DEEBOT X2 COMBO",
    "defaultStatus": "unknown",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThan": "1.81.10",
        "versionType": "custom"
      },
      {
        "version": "1.81.10",
        "status": "unaffected"
      }
    ]
  },
  {
    "vendor": "ECOVACS",
    "product": "DEEBOT X5 PRO ULTRA",
    "defaultStatus": "unknown",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThan": "1.17.0",
        "versionType": "custom"
      },
      {
        "version": "1.17.0",
        "status": "unaffected"
      }
    ]
  }
]

Source	Link
dontvacuum	www.dontvacuum.me/talks/DEFCON32/DEFCON32_reveng_hacking_ecovacs_robots.pdf
youtu	www.youtu.be/_wUsM0Mlenc
ecovacs	www.ecovacs.com/global/userhelp/dsa20241130001
ecovacs	www.ecovacs.com/global/userhelp/dsa20241119

23 Sep 2025 17:35Current

9.8High risk

Vulners AI Score9.8

CVSS 45.8

CVSS 3.19.6

EPSS0.00628

SSVC

CWE-77