How Ecovacs Robots Got Hacked And What We Can Learn From It
summary
Research shows Ecovacs devices have 18 CVEs across 30+ models including a live PIN bypass via client-side auth and a Bluetooth LE remote code execution that yields root shell and can spread between robots creating a worm; demos use Burp Suite, NRF Connect and cheap UART/flash tools and achieve persistence and camera access, a lawnmower compromise plays start-up tones and reaches ~150 m, under 10 users are confirmed impacted but corporate response and certs fail to prevent mass fallout.
AI-written summary · about
chapters (10)
- 0:00Introduction to IoT vulnerabilities
- 3:11Ecovacs company background
- 9:54Hardware reverse engineering process
- 14:49Software vulnerabilities in devices
- 17:15Live video PIN bypass exploit
- 21:28Bluetooth remote code execution
- 25:03Disclosure and media response
- 30:19Aftermath and vendor reaction
- 33:30Lessons learned from the hack
- 35:56Acknowledgements and Q&A
related talks
31mHacking Everything – The Dark Side of the Internet of Things
49mxIoT Hacking Demonstrations & Strategies to Disappoint Bad Actors
44mNight of the living vulnerabilities
01h 06mBackdoors in Back Doors
26mCuriosity Killed the Hack
59mThe Less Hacked Path
40mWearable Botnets and Happy Hacked Drivers
28mUnveiling Remote Code Execution: How Vulnerabilities Lead to System Takeovers