Mammotion robotic mowers face cybersecurity vulnerabilities

Cybersecurity experts have identified 14 vulnerabilities within the Mammotion ecosystem, potentially exposing approximately 337,000 user accounts. The investigation, conducted by Sammy Azdoufal, Andreas Makris, and Kevin Finisterre, suggests that hackers could have accessed sensitive information including email addresses, usernames, account numbers, operating regions, and technical profile data.

Beyond data exposure, researchers demonstrated that it was possible to remotely control a robotic lawn mower from thousands of kilometers away. In a controlled environment, experts successfully linked another user's mower to their own account, allowing them to interact with the machine via the application. The most affected user regions identified include Germany, France, and Sweden.