CVE-2025-30199
—CVSS 4.0
7.5 high
EPSS
<1%p21
Published
()
Modified
Description
ECOVACS vacuum robot base stations do not validate firmware updates, so malicious over-the-air updates can be sent to base station via insecure connection between robot and base station.
- Vendors
- ecovacs
- Products
- deebot x1s pro firmware, deebot x1 pro omni firmware, deebot x1 omni firmware, deebot x1 turbo firmware, deebot t10 firmware, deebot t10 omni firmware, deebot t10 plus firmware, deebot t10 turbo firmware, deebot t20 omni firmware, deebot t20 pro plus firmware, deebot t20 pro firmware, deebot t30 omni firmware
- Weakness
- CWE-494
- Vector
- CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
In the news0 stories
No ingested article mentions this CVE yet.