Skip to content
OpenAdvisories
Medium · 6.3 CVE-2025-30198 EUVD-2025-27020GHSA-2hh7-5899-hfpg

ECOVACS Vacuum and Base Station Hard-Coded WPA2-PSK

Published Sep 5, 2025 · Updated Sep 8, 2025 · Assigned by cisa-cg

Description

ECOVACS robot vacuums and base stations communicate via an insecure Wi-Fi network with a deterministic WPA2-PSK, which can be easily derived.

Affected products

VendorProductAffectedFixed
ECOVACS DEEBOT X1 Series — —
ECOVACS DEEBOT T20 Series — —
ECOVACS DEEBOT T10 Series — —
ECOVACS DEEBOT T30 Series — —

Advisories 1

References