CVEs (4)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Ecovacs 13Deebot T10 Firmware Deebot T10 Omni FirmwareDeebot T10 Plus Firmware+10 moreJun 17, 2026 Sep 5, 2025 2.3 LOW· v4 6.3 MEDIUM· v3 N/A· v2 ECOVACS robot vacuums and base stations communicate via an insecure Wi-Fi network with a deterministic AES encryption key, which can be easily derived. |
1Ecovacs 13Deebot T10 Firmware Deebot T10 Omni FirmwareDeebot T10 Plus Firmware+10 moreJun 17, 2026 Sep 5, 2025 7.5 HIGH· v4 7.2 HIGH· v3 N/A· v2 ECOVACS vacuum robot base stations do not validate firmware updates, so malicious over-the-air updates can be sent to base station via insecure connection between robot and base station. |
1Ecovacs 13Deebot T10 Firmware Deebot T10 Omni FirmwareDeebot T10 Plus Firmware+10 moreJun 17, 2026 Sep 5, 2025 2.3 LOW· v4 6.3 MEDIUM· v3 N/A· v2 ECOVACS robot vacuums and base stations communicate via an insecure Wi-Fi network with a deterministic WPA2-PSK, which can be easily derived. |
1Ecovacs 12Deebot T30 Omni Firmware Deebot T30s FirmwareDeebot X2 Combo Firmware+9 moreJun 17, 2026 Jan 23, 2025 5.8 MEDIUM· v4 9.6 CRITICAL· v3 N/A· v2 ECOVACS robot lawnmowers and vacuums are vulnerable to command injection via SetNetPin() over an unauthenticated BLE connection. |