2025-01-23 16:36:50
cisa-cg
PUBLISHED
ECOVACS lawnmowers and vacuums do not properly validate TLS certificates. An unauthenticated attacker can read or modify TLS traffic, possibly modifying firmware updates.