CVE-2024-52330
ECOVACS lawnmowers and vacuums do not properly validate TLS certificates. An unauthenticated attacker can read or modify TLS traffic, possibly modifying firmware updates.
| Software | From | Fixed in |
|---|---|---|
| ecovacs / deebot_x2_omni_firmware | - | 1.76.6 |
| ecovacs / deebot_x2_combo_firmware | - | 1.81.10 |
| ecovacs / deebot_x2s_firmware | - | 1.49.0 |
| ecovacs / deebot_x5_pro_firmware | - | 1.70.0 |
| ecovacs / deebot_x5_pro_plus_firmware | - | 1.38.0 |
| ecovacs / deebot_x5_pro_ultra_firmware | - | 1.17.0 |
| ecovacs / mate_x_firmware | - | 1.44.18 |
| ecovacs / deebot_x1_omni_firmware | - | 2.4.41 |
| ecovacs / deebot_x1_turbo_firmware | - | 2.4.41 |
| ecovacs / deebot_x1_pro_omni_firmware | - | 2.4.41 |
| ecovacs / deebot_x1_firmware | - | 1.7.3 |
| ecovacs / deebot_x1_plus_firmware | - | 1.7.3 |
| ecovacs / deebot_x1s_pro_firmware | - | 2.5.31 |
| ecovacs / deebot_x1s_pro_plus_firmware | - | 1.23.0 |
| ecovacs / deebot_x1e_omni_firmware | - | 2.4.42 |
| ecovacs / deebot_t10_turbo_firmware | - | 1.10.0 |
| ecovacs / deebot_t10_plus_firmware | - | 1.7.5 |
| ecovacs / deebot_t10_firmware | - | 1.7.5 |
| ecovacs / deebot_t10_omni_firmware | - | 1.9.0 |
| ecovacs / deebot_x2_pro_firmware | - | 1.76.6 |
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime