Description
ECOVACS vacuum robot base stations do not validate firmware updates, so malicious over-the-air updates can be sent to base station via insecure connection between robot and base station.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ECOVACS | DEEBOT X1 Series | — | — |
| ECOVACS | DEEBOT T20 Series | — | — |
| ECOVACS | DEEBOT T10 Series | — | — |
| ECOVACS | DEEBOT T30 Series | — | — |
Advisories 1
- ICSA-25-135-19 ECOVACS DEEBOT Vacuum and Base Station (Update A) CISA ICS & IT advisories · Jul 10, 2025