Insecure Firmware Update Vulnerability in ECOVACS Vacuum Robot Base Stations
CVE-2025-30199
7.5HIGH
What is CVE-2025-30199?
The ECOVACS vacuum robot base stations possess a vulnerability that allows for firmware updates to be conducted without proper validation. This flaw can enable attackers to exploit unsecured connections between the robot and the base station, potentially leading to unauthorized firmware installation. This risk underscores the critical importance of secure communication protocols to prevent malicious entities from hijacking device functionality.
Affected Version(s)
DEEBOT T10 Series *
DEEBOT T20 Series *
DEEBOT T30 Series *
References
CVSS V4
Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None
Timeline
Vulnerability published
Vulnerability Reserved
Credit
Dennis Giese, undefined
Braelynn Luedtke, undefined
Chris Anderson, undefined