CVE-2024-11147

EUVD-2024-34389 · Published Jan 23, 2025

ECOVACS robot lawnmowers and vacuums use a deterministic root password generated based on model and serial number. An attacker with shell access can login as root.

Technologies

Ecovacs Deebot N9 FirmwareEcovacs Deebot T20 FirmwareEcovacs Deebot N10Ecovacs Airbot AvaEcovacs Deebot N9Ecovacs Deebot X1Ecovacs Deebot T10 FirmwareEcovacs Deebot X1 FirmwareEcovacs Deebot X2 FirmwareEcovacs Deebot T10Ecovacs Airbot Z1Ecovacs Airbot AndyEcovacs Airbot Ava FirmwareEcovacs Goat G1Ecovacs Airbot Z1 FirmwareEcovacs Goat G1 FirmwareEcovacs Deebot T9Ecovacs Deebot 900Ecovacs Deebot N10 FirmwareEcovacs Deebot X2Ecovacs Airbot Andy FirmwareEcovacs Deebot N8 FirmwareEcovacs Deebot T20Ecovacs Deebot N8Ecovacs Deebot T8Ecovacs Deebot T8 FirmwareEcovacs Deebot T9 FirmwareEcovacs Deebot 900 Firmware

Weaknesses

CWE-798

CVSS scores

v4.07.0CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
v3.17.6CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Initial Access Persistence Privilege Escalation Stealth Credential Access

T1078.001Default Accounts T1552.001Credentials In Files

References

Potentially impacted assets

See if this affects your attack surface