📦 Home

The ECOVACS HOME mobile app plugins for specific robot vacuum models fail to properly validate TLS certificates, allowing man-in-the-middle attackers to intercept and modify encrypted traffic. This vu...

This vulnerability allows authenticated attackers to bypass the PIN protection on ECOVACS robot lawnmowers and vacuums, enabling unauthorized access to live video feeds. It affects users of ECOVACS cl...