ECOVACS Deebot T20 OMNI and T20e OMNI WiFi Remote Code Execution Vulnerability

A remote code execution vulnerability has been identified in the ECOVACS Deebot T20 OMNI and T20e OMNI models, prior to version 1.24.0. This vulnerability allows for unauthorized code execution on the device via WiFi.

Impact

Exploitation of this vulnerability could lead to unauthorized remote code execution on the affected robotic vacuum cleaners.

Remediation

Users can update their devices to version 1.24.0 to address this vulnerability. For devices that support automatic updates, system update notifications will be received. ECOVACS has proactively pushed the update to all users.