CVE-2024-52331

creationtimestamp| type| source ---|---|--- 2025-01-23 17:15:53+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lggf3mf72m2t 2025-01-23 17:40:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lgggguul3a2b 2025-01-23 19:09:14+00:00| seen|...

CVE-2024-52331 ECOVACS lawnmowers and vacuums deterministic firmware encryption key

ECOVACS robot lawnmowers and vacuums use a deterministic symmetric key to decrypt firmware updates. An attacker can create and encrypt malicious firmware that will be successfully decrypted and installed by the robot...

CVE-2024-52331

ECOVACS robot lawnmowers and vacuums are affected by CVE-2024-52331 due to a deterministic symmetric key used to decrypt firmware updates. This allows an attacker to create and encrypt malicious firmware that will be decrypted and installed by the device. The description and connected entries con...