Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2024-52330

ECOVACS lawnmowers and vacuums do not properly validate TLS certificates

ECOVACS lawnmowers and vacuums do not properly validate TLS certificates. An unauthenticated attacker can read or modify TLS traffic, possibly modifying firmware updates.

CVSS 4.0 · 9.5 Critical EPSS < 1% KEV · Not listed
Vendors
Ecovacs
Products
Deebot T10 Deebot T10 Firmware Deebot T10 Omni and 37 more
CVE-2025-30200

ECOVACS Vacuum and Base Station Hard-Coded AES Encryption

ECOVACS robot vacuums and base stations communicate via an insecure Wi-Fi network with a deterministic AES encryption key, which can be easily derived.

CVSS 4.0 · 2.3 Low EPSS < 1% KEV · Not listed
Vendors
Ecovacs
Products
Deebot T10 Deebot T10 Firmware Deebot T10 Omni and 23 more
CVE-2025-30199

ECOVACS Vacuum and Base Station accept unsigned firmware

ECOVACS vacuum robot base stations do not validate firmware updates, so malicious over-the-air updates can be sent to base station via insecure connection between robot and base station.

CVSS 4.0 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Ecovacs
Products
Deebot T10 Deebot T10 Firmware Deebot T10 Omni and 23 more