Insecure Audio File Storage in ECOVACS Robot Lawn Mowers and Vacuums
CVE-2024-52328
1.8LOW
What is CVE-2024-52328?
ECOVACS robot lawnmowers and vacuums store audio files insecurely, which can lead to a situation where attackers with access to the /data filesystem can delete or alter crucial warning files. This risk means that users may be unaware of the state of their devices' cameras, potentially exposing them to privacy violations.
Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Unspecified robots *
References
CVSS V4
Score:
1.8
Severity:
LOW
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None
Timeline
Vulnerability published
Vulnerability Reserved