ECOVACS Robot Devices Insecurely Store Audio Files Indicating Camera Status

A vulnerability exists in ECOVACS robot lawnmowers and vacuums due to the insecure storage of audio files that signal when the camera is active. This issue allows an attacker with access to the /data filesystem to delete or alter these warning files, potentially leaving users unaware that the camera is recording.

Impact

Exploitation of this vulnerability could lead to unauthorized modification or deletion of audio files, creating a false sense of security regarding the camera's status.