CVE-2025-30200
—CVSS 4.0
2.3 low
EPSS
<1%p3
Published
()
Modified
Description
ECOVACS robot vacuums and base stations communicate via an insecure Wi-Fi network with a deterministic AES encryption key, which can be easily derived.
- Vendors
- ecovacs
- Products
- deebot x1s pro firmware, deebot x1 pro omni firmware, deebot x1 omni firmware, deebot x1 turbo firmware, deebot t10 firmware, deebot t10 omni firmware, deebot t10 plus firmware, deebot t10 turbo firmware, deebot t20 omni firmware, deebot t20 pro plus firmware, deebot t20 pro firmware, deebot t30 omni firmware
- Weakness
- CWE-321, CWE-798
- Vector
- CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
In the news0 stories
No ingested article mentions this CVE yet.