ECOVACS robot lawn mowers and vacuums use a shared, static secret key to encrypt BLE GATT messages. An unauthenticated attacker within BLE range can control any robot using the same key.
This Cyber News was published on www.tenable.com. Publication date: Thu, 23 Jan 2025 23:11:02 +0000