CVE-2024-52328

Publication date

2025-01-23 16:35:23

Family

cisa-cg

State

PUBLISHED

Description

ECOVACS robot lawnmowers and vacuums insecurely store audio files used to indicate that the camera is on. An attacker with access to the /data filesystem can delete or modify warning files such that users may not be aware that the camera is on.