Integrating Robotic Navigation with Blockchain: a Novel PoS-Based Approach for Heterogeneous Robotic Teams

This work explores a novel integration of blockchain methodologies with Wide Area Visual Navigation WAVN to address challenges in visual navigation for a heterogeneous team of mobile robots deployed for unstructured applications in agriculture, forestry, etc. Focusing on overcoming challenges suc...

CVE-2024-52331

ECOVACS robot lawnmowers and vacuums use a deterministic symmetric key to decrypt firmware updates. An attacker can create and encrypt malicious firmware that will be successfully decrypted and installed by the robot...

CVE-2024-11147

ECOVACS robot lawnmowers and vacuums use a deterministic root password generated based on model and serial number. An attacker with shell access can login as root...

CVE-2024-52325

ECOVACS robot lawnmowers and vacuums are vulnerable to command injection via SetNetPin over an unauthenticated BLE connection...

PT-2025-1744 · Ecovacs · Ecovacs Vacuums +1

Name of the Vulnerable Software and Affected Versions: ECOVACS robot lawn mowers and vacuums affected versions not specified Description: The issue concerns the use of a shared, static secret key to encrypt BLE GATT messages in ECOVACS robots. This allows an unauthenticated attacker within BLE...

PT-2025-2926 · Ecovacs · Ecovacs

Name of the Vulnerable Software and Affected Versions: ECOVACS robot lawnmowers and vacuums affected versions not specified Description: The issue concerns the insecure storage of audio files used to indicate when the camera is on in ECOVACS robots. An attacker with access to the /data filesystem...

PT-2025-2924 · Ecovacs · Ecovacs

Name of the Vulnerable Software and Affected Versions: ECOVACS robot lawnmowers and vacuums affected versions not specified Description: The issue concerns command injection via the SetNetPin function over an unauthenticated Bluetooth Low Energy BLE connection. This allows for potential...

PT-2025-2929 · Ecovacs · Ecovacs

Name of the Vulnerable Software and Affected Versions: ECOVACS robot lawnmowers and vacuums affected versions not specified Description: The issue concerns the use of a deterministic symmetric key for decrypting firmware updates in ECOVACS robots. This allows an attacker to create and encrypt...

Jailbreaking LLM-Controlled Robots

Surprising no one, it's easy to trick an LLM-controlled robot into ignoring its safety instructions...

The Japanese Robot Controversy Lurking in Israel’s Military Supply Chain

Activists claim Japanese industrial robots are being used to build military equipment for Israel. The robot maker denies the claims, but the episode reveals the complex ethics of global manufacturing...

CVE-2024-1913

An attacker who successfully exploited these vulnerabilities could cause the robot to stop, make the robot controller inaccessible, or execute arbitrary code. The vulnerability could potentially be exploited to perform unauthorized actions by an attacker. This vulnerability arises under specific...

编号撤回

Robot Operating System is a meta-operating system for robots. This CVE number has been withdrawn...

编号撤回

Robot Operating System is a meta-operating system for robots. This CVE number has been withdrawn...

编号撤回

Robot Operating System is a meta-operating system for robots. This CVE number has been withdrawn...

编号撤回

Robot Operating System is a meta-operating system for robots. This CVE number has been withdrawn...

编号撤回

Robot Operating System is a meta-operating system for robots. This CVE number has been withdrawn...

编号撤回

Robot Operating System is a meta-operating system for robots. This CVE number has been withdrawn...

编号撤回

Robot Operating System is a meta-operating system for robots. This CVE number has been withdrawn...

编号撤回

Robot Operating System is a meta-operating system for robots. This CVE number has been withdrawn...

Friday Squid Blogging: SqUID Bots

Theyre AI warehouse robots. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Read my blog posting guidelines here...