Skip to content
Threat Feed
Subscribe

Vendor

SharkNinja

1 brief RSS
critical threat

Unpatched Shark Vacuum Flaw Allows Region-Wide Remote Control and Data Theft

A researcher discovered an unpatched vulnerability in Shark RV2320EDUS robot vacuums that allows an attacker with physical access to extract an overly permissive AWS IoT certificate, enabling region-wide remote command execution and data theft on other Shark vacuums.

Shark RV2320EDUS +1 iot-security vulnerability cloud-security access-control remote-code-execution
6t