ECOVACS ROBOTICS vulnerabilities and threats

DEEBOT PRO M1 and DEEBOT PRO K1VAC incorrectly implement authentication algorithm in Websocket communications. An unauthenticated attacker may connect and operate the affected robot.

Android and iOS apps ECOVACS PRO App improperly validate server certificates. Communication may be retrieved and/or altered.

The ECOVACS ROBOTICS DEEBOT PRO M1 and DEEBOT PRO K1VAC models use weak passwords for their Wi-Fi hotspot networks. This weakness allows an attacker to analyze and obtain the password to connect to the robot's access point. The vulnerability has a medium severity rating with a CVSS score of 5.3, indicating limited confidentiality impact without affecting integrity or availability.

The ECOVACS ROBOTICS DEEBOT PRO M1 and DEEBOT PRO K1VAC devices have root accounts configured with weak passwords. Physical access to these devices may allow an attacker to obtain the root password. This vulnerability has a medium severity rating with a CVSS score of 4.6.

The ECOVACS ROBOTICS DEEBOT PRO M1 and PRO K1VAC models have a vulnerability in their WebSocket communication authentication. The private key used in this communication can be exposed through a man-in-the-middle attack by analyzing traffic data, allowing an attacker to alter communication contents.

The ECOVACS ROBOTICS DEEBOT PRO M1 and DEEBOT PRO K1VAC devices use the wget command with server certificate validation disabled. This improper certificate validation allows a man-in-the-middle (MitM) attacker to intercept and potentially alter communications. Such interception could lead to arbitrary code execution with administrative privileges on the affected devices. The vulnerability has a medium severity rating with a CVSS score of 4.8. No official patch or remediation guidance is currently available.

The ECOVACS ROBOTICS DEEBOT PRO M1 and DEEBOT PRO K1VAC models have an active telnet server enabled by default. This debug code allows potential attackers to log in via telnet, posing a high-severity security risk due to the possibility of unauthorized access.

The ECOVACS ROBOTICS DEEBOT PRO M1 and DEEBOT PRO K1VAC devices do not validate server certificates during MQTT communications. This improper certificate validation could allow an attacker to retrieve operation and activity logs stored on the affected products. The vulnerability has a CVSS score of 6.5, indicating a medium severity level. No patch or official remediation has been confirmed at this time.

The ECOVACS ROBOTICS DEEBOT PRO M1 and DEEBOT PRO K1VAC models have an active debug web server enabled by default. This debug functionality allows retrieval of floor map and log information stored on the devices. The vulnerability has a high severity score of 7.5 and does not require user interaction or privileges to exploit. No official patch or remediation guidance has been provided yet.