CVE-2019-12820

CVE-2019-12820 describes a medium-severity vulnerability affecting the Shenzhen Jisiwei i3 robot vacuum cleaner and its associated mobile application (Android and iOS). The flaw stems from the app's use of unencrypted HTTP for sensitive communications, including login credentials and personal information. An attacker could exploit this via a Man-in-the-Middle (MiTM) attack on the local network to intercept user credentials, gaining unauthorized access to the robot vacuum cleaner. While no active exploitation, public exploit code, or significant community discussion has been observed, the vulnerability remains a potential risk for affected users.