{"id":"01M6MYEASJTCYD9PBQC0EBCGH0","slug":"ecovacs-deebot-x2-omni","vendor":"Ecovacs","oem":null,"model":"Deebot X2 Omni","hw_revision":null,"category":"robot_vacuum","country_of_origin":"CN","description":"Flagship robot vacuum with camera and microphone. Researchers Dennis Giese and Braelynn (DEF CON 32, 2024) demonstrated Bluetooth-based takeover enabling remote camera and microphone access.","status":"confirmed","status_reason":"DEF CON 32 research (2024); vendor acknowledged and patched","status_at":1793853874650,"status_manual":1,"report_count":1,"verified_count":1,"created_by":"01M6MYDMJ4H4JTJ0TK8JWT1E1B","created_at":1793851861810,"updated_at":1793853874650,"url":"https://isitspying.com/p/ecovacs-deebot-x2-omni","badge":"https://isitspying.com/badge/ecovacs-deebot-x2-omni.svg","identifiers":[{"kind":"model_number","value":"DEEBOTX2OMNI","product_id":"01M6MYEASJTCYD9PBQC0EBCGH0","confidence":1,"source":"seed","created_at":1793851861925},{"kind":"model_number","value":"X2OMNI","product_id":"01M6MYEASJTCYD9PBQC0EBCGH0","confidence":1,"source":"seed","created_at":1793851861973}],"findings":[{"kind":"always_on_mic","severity":"high","n":1,"verified_n":1},{"kind":"hardcoded_credentials","severity":"critical","n":1,"verified_n":1}],"contacted_hosts":[],"reports":[{"id":"01M6MYEB65Q2EMQJ0A78YSAB3Z","url":"https://isitspying.com/r/01M6MYEB65Q2EMQJ0A78YSAB3Z","status":"verified","verdict":"vulnerable","summary":"Bluetooth pairing flaw allows a nearby attacker to gain root and stream the camera and microphone; incidents of hijacked units reported in 2024","method":"teardown","channel":"api","handle":"isitspying","created_at":1793851862213}],"responses":[],"sources":[{"id":"01M6MYEB3HY47SG0GBTEW3CDXV","product_id":"01M6MYEASJTCYD9PBQC0EBCGH0","report_id":null,"title":"Hackers could take over Ecovacs robot vacuums' cameras and mics","url":"https://techcrunch.com/2024/10/04/","publisher":"TechCrunch","published_at":"2024-10-04","created_at":1793851862129},{"id":"01M6MYEB16S4S2Y80N27QBA5T6","product_id":"01M6MYEASJTCYD9PBQC0EBCGH0","report_id":null,"title":"Vacuum robot security and privacy – prevent your robot from sucking your data (DEF CON 32)","url":"https://defcon.org/","publisher":"DEF CON","published_at":"2024-08-10","created_at":1793851862054}]}