ECOVACS vulnerabilities

Newest CVEs

• CVE-2025-30198

  ECOVACS Vacuum and Base Station Hard-Coded WPA2-PSK

  ECOVACS · DEEBOT X1 Series

  Low2.3
• CVE-2025-30199

  ECOVACS Vacuum and Base Station accept unsigned firmware

  ECOVACS · DEEBOT X1 Series

  High7.5
• CVE-2025-30200

  ECOVACS Vacuum and Base Station Hard-Coded AES Encryption

  ECOVACS · DEEBOT X1 Series

  Low2.3
• CVE-2025-2394

  Disclosure of Alibaba (OSS) Keys In Ecovacs Home Android and iOS Mobile Applications

  Ecovacs · Ecovacs Mobile and Android Application

  Medium4.7
• CVE-2024-52327

  ECOVACS lawnmower and vacuum cloud service live video PIN bypass

  ECOVACS · ECOVACS HOME

  Medium6.0
• CVE-2024-12079

  ECOVACS lawnmowers cleartext storage of anti-theft PIN

  ECOVACS · Unspecified robots

  Medium4.8
• CVE-2024-12078

  ECOVACS lawnmowers and vacuums static BLE GATT encryption key

  ECOVACS · Unspecified robots

  Medium5.3
• CVE-2024-11147

  ECOVACS lawnmowers and vacuums deterministic root password

  ECOVACS · Unspecified robots

  High7.0
• CVE-2024-52331

  ECOVACS lawnmowers and vacuums deterministic firmware encryption key

  ECOVACS · Unspecified robots

  High7.7
• CVE-2024-52330

  ECOVACS lawnmowers and vacuums do not properly validate TLS certificates

  ECOVACS · DEEBOT X5 PRO PLUS

  Critical9.5