CVE-2025-30198
—CVSS 4.0
2.3 low
EPSS
<1%p12
Published
()
Modified
Description
ECOVACS robot vacuums and base stations communicate via an insecure Wi-Fi network with a deterministic WPA2-PSK, which can be easily derived.
- Vendors
- ecovacs
- Products
- deebot x1s pro firmware, deebot x1 pro omni firmware, deebot x1 omni firmware, deebot x1 turbo firmware, deebot t10 firmware, deebot t10 omni firmware, deebot t10 plus firmware, deebot t10 turbo firmware, deebot t20 omni firmware, deebot t20 pro plus firmware, deebot t20 pro firmware, deebot t30 omni firmware
- Weakness
- CWE-321, CWE-798
- Vector
- CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
In the news0 stories
No ingested article mentions this CVE yet.