Our takeCISA reports active exploitation in Eufy Omni C20 and X10 Pro robot vacuums below 1.6.4. Successful attacks let an adversary run system-level commands or arbitrary code. Update to 1.6.4 or later.Cyber Resilience desk
Sources (2)
- cisa_advisories · cisa_advisories
- cisa_ics · cisa_ics
What this means for you — Security leader:Update Eufy Omni C20 and Omni X10 Pro to firmware 1.6.4 or later if you run them. CISA reports active exploitation of these CVEs that allow system-level command execution.
What this means for you — Lean IT orgs:If you use an Eufy Omni C20 or Omni X10 Pro robot vacuum, update it to version 1.6.4 right away. CISA says attackers are already exploiting these flaws to run commands on the device.
What this means for you — MSP:Check client environments for any Eufy Omni C20 or Omni X10 Pro devices and push firmware 1.6.4 immediately. CISA confirms active exploitation that can lead to arbitrary code execution.
What this means for you — Researcher:CISA advisory ICSA-26-267-02 details three CVEs in Eufy Omni C20/X10 Pro below 1.6.4 that permit system-level command execution or arbitrary code; exploitation is confirmed active.