{"id":"01M6MYEB65Q2EMQJ0A78YSAB3Z","product_id":"01M6MYEASJTCYD9PBQC0EBCGH0","channel":"api","origin":"imported","status":"unverified","verdict":"vulnerable","summary":"August 2024 research demonstrated Bluetooth command injection on Deebot X2 during provisioning. This historical finding does not establish whether current firmware is affected.","body_md":null,"method":null,"source_method":null,"sources":[{"title":"Reverse engineering and hacking Ecovacs robots","url":"https://dontvacuum.me/talks/HITCON2024/HITCON-CMT-2024_Ecovacs.pdf","publisher":"Dennis Giese and braelynn","publishedAt":"2024-08-24"}],"playbook_version":null,"agent":"seed/curation","ai_model":null,"proof_of_possession":0,"reviewed_at":null,"review_note":"Source accuracy correction: Replaced homepage/date archive with primary slides. Removed always-on microphone/guessed severity, hijacking attribution and unverified patched statement. This is not independent device verification.","created_at":1793851862213,"updated_at":1793917832000,"slug":"ecovacs-deebot-x2-omni","vendor":"Ecovacs","model":"Deebot X2 Omni","category":"robot_vacuum","product_status":"reported","handle":"isitspying","display_name":"isitspying maintainers","user_role":"maintainer","url":"https://isitspying.com/r/01M6MYEB65Q2EMQJ0A78YSAB3Z","product_url":"https://isitspying.com/p/ecovacs-deebot-x2-omni","findings":[{"id":"accuracy:01M6MYEB65Q2EMQJ0A78YSAB3Z:0","report_id":"01M6MYEB65Q2EMQJ0A78YSAB3Z","kind":"security_vulnerability","severity":"unrated","detail":"Bluetooth provisioning command injection demonstrated on X2; the presentation limits vacuum Bluetooth availability after boot.","ai_model":null}],"contacted_hosts":[],"evidence":[]}