Skip to content
OpenAdvisories
Medium · 6.3 CVE-2025-30200 EUVD-2025-27023GHSA-4xjv-rh5p-qv86

ECOVACS Vacuum and Base Station Hard-Coded AES Encryption

Published Sep 5, 2025 · Updated Sep 8, 2025 · Assigned by cisa-cg

Description

ECOVACS robot vacuums and base stations communicate via an insecure Wi-Fi network with a deterministic AES encryption key, which can be easily derived.

Affected products

VendorProductAffectedFixed
ECOVACS DEEBOT X1 Series — —
ECOVACS DEEBOT T20 Series — —
ECOVACS DEEBOT T10 Series — —
ECOVACS DEEBOT T30 Series — —

Advisories 1

References