Ironpie M6 vacuum cleaner has six high-severity flaws that could allow hackers to view its video footage and launch denial of service attacks. The vacuum cleaner is built by artificial intelligence home robot company Trifo, and was first launched IronPie at CES 2019. The most severe vulnerability exists in the vacuum s Android app, which has an 8.5 out of 10 on the CVSS 3.0 scale. The manufacturer, which owns the vacuum, has so far not responded to attempts to report the vulnerability starting on Dec. 16, 2019 and the flaws remain unpatched.
Source: https://threatpost.com/unpatched-security-flaws-open-connected-vacuum-to-takeover/153142/