Insecure Wi-Fi Communication in ECOVACS Robot Vacuums and Base Stations
CVE-2025-30200
2.3LOW
What is CVE-2025-30200?
ECOVACS robot vacuums and base stations are vulnerable due to their reliance on an insecure Wi-Fi network for communication. This vulnerability arises from the use of a deterministic AES encryption key, which can be easily derived by potential attackers, exposing sensitive information and control capabilities of the devices. Users are advised to review their security measures and consider network segmentation to mitigate the risks associated with this vulnerability.
Affected Version(s)
DEEBOT T10 Series *
DEEBOT T20 Series *
DEEBOT T30 Series *
References
CVSS V4
Score:
2.3
Severity:
LOW
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None
Timeline
Vulnerability published
Vulnerability Reserved
Credit
Dennis Giese, undefined
Braelynn Luedtke, undefined
Chris Anderson, undefined