CVE-2025-30200

ECOVACS Vacuum and Base Station Hard-Coded AES Encryption

Published Sep 5, 2025 CVSS 4.0 · 2.3 Low EPSS < 1% KEV · Not listed
Description
ECOVACS robot vacuums and base stations communicate via an insecure Wi-Fi network with a deterministic AES encryption key, which can be easily derived.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2025-27023 ECOVACS robot vacuums and base stations communicate via an insecure Wi-Fi network with a deterministic AES encryption key, which can be easily derived.
History
Type Values Removed Values Added
First Time appeared Ecovacs
Ecovacs deebot T10
Ecovacs deebot T10 Firmware
Ecovacs deebot T10 Omni
Ecovacs deebot T10 Omni Firmware
Ecovacs deebot T10 Plus
Ecovacs deebot T10 Plus Firmware
Ecovacs deebot T10 Turbo
Ecovacs deebot T10 Turbo Firmware
Ecovacs deebot T20 Omni
Ecovacs deebot T20 Omni Firmware
Ecovacs deebot T20 Pro
Ecovacs deebot T20 Pro Firmware
Ecovacs deebot T20 Pro Plus
Ecovacs deebot T20 Pro Plus Firmware
Ecovacs deebot T30 Omni
Ecovacs deebot T30 Omni Firmware
Ecovacs deebot T30s
Ecovacs deebot T30s Firmware
Ecovacs deebot X1 Omni
Ecovacs deebot X1 Omni Firmware
Ecovacs deebot X1 Pro Omni
Ecovacs deebot X1 Pro Omni Firmware
Ecovacs deebot X1 Turbo
Ecovacs deebot X1 Turbo Firmware
Ecovacs deebot X1s Pro
Ecovacs deebot X1s Pro Firmware
CPEs cpe:2.3:h:ecovacs:deebot_t10:-:*:*:*:*:*:*:*
cpe:2.3:h:ecovacs:deebot_t10_omni:-:*:*:*:*:*:*:*
cpe:2.3:h:ecovacs:deebot_t10_plus:-:*:*:*:*:*:*:*
cpe:2.3:h:ecovacs:deebot_t10_turbo:-:*:*:*:*:*:*:*
cpe:2.3:h:ecovacs:deebot_t20_omni:-:*:*:*:*:*:*:*
cpe:2.3:h:ecovacs:deebot_t20_pro:-:*:*:*:*:*:*:*
cpe:2.3:h:ecovacs:deebot_t20_pro_plus:-:*:*:*:*:*:*:*
cpe:2.3:h:ecovacs:deebot_t30_omni:-:*:*:*:*:*:*:*
cpe:2.3:h:ecovacs:deebot_t30s:-:*:*:*:*:*:*:*
cpe:2.3:h:ecovacs:deebot_x1_omni:-:*:*:*:*:*:*:*
cpe:2.3:h:ecovacs:deebot_x1_pro_omni:-:*:*:*:*:*:*:*
cpe:2.3:h:ecovacs:deebot_x1_turbo:-:*:*:*:*:*:*:*
cpe:2.3:h:ecovacs:deebot_x1s_pro:-:*:*:*:*:*:*:*
cpe:2.3:o:ecovacs:deebot_t10_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:ecovacs:deebot_t10_omni_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:ecovacs:deebot_t10_plus_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:ecovacs:deebot_t10_turbo_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:ecovacs:deebot_t20_omni_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:ecovacs:deebot_t20_pro_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:ecovacs:deebot_t20_pro_plus_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:ecovacs:deebot_t30_omni_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:ecovacs:deebot_t30s_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:ecovacs:deebot_x1_omni_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:ecovacs:deebot_x1_pro_omni_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:ecovacs:deebot_x1_turbo_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:ecovacs:deebot_x1s_pro_firmware:*:*:*:*:*:*:*:*
Vendors & Products Ecovacs
Ecovacs deebot T10
Ecovacs deebot T10 Firmware
Ecovacs deebot T10 Omni
Ecovacs deebot T10 Omni Firmware
Ecovacs deebot T10 Plus
Ecovacs deebot T10 Plus Firmware
Ecovacs deebot T10 Turbo
Ecovacs deebot T10 Turbo Firmware
Ecovacs deebot T20 Omni
Ecovacs deebot T20 Omni Firmware
Ecovacs deebot T20 Pro
Ecovacs deebot T20 Pro Firmware
Ecovacs deebot T20 Pro Plus
Ecovacs deebot T20 Pro Plus Firmware
Ecovacs deebot T30 Omni
Ecovacs deebot T30 Omni Firmware
Ecovacs deebot T30s
Ecovacs deebot T30s Firmware
Ecovacs deebot X1 Omni
Ecovacs deebot X1 Omni Firmware
Ecovacs deebot X1 Pro Omni
Ecovacs deebot X1 Pro Omni Firmware
Ecovacs deebot X1 Turbo
Ecovacs deebot X1 Turbo Firmware
Ecovacs deebot X1s Pro
Ecovacs deebot X1s Pro Firmware
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Type Values Removed Values Added
Description ECOVACS robot vacuums and base stations communicate via an insecure Wi-Fi network with a deterministic AES encryption key, which can be easily derived.
Title ECOVACS Vacuum and Base Station Hard-Coded AES Encryption
Weaknesses CWE-321
CWE-798
References
Metrics cvssV3_1

{'score': 6.3, 'vector': 'CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L'}

cvssV4_0

{'score': 2.3, 'vector': 'CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N'}