Ecovacs

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2025-30200 1Ecovacs 13Deebot T10 Firmware Deebot T10 Omni FirmwareDeebot T10 Plus Firmware+10 more Jun 17, 2026 Sep 5, 2025 2.3 LOW· v4 6.3 MEDIUM· v3 N/A· v2 ECOVACS robot vacuums and base stations communicate via an insecure Wi-Fi network with a deterministic AES encryption key, which can be easily derived.
CVE-2025-30199 1Ecovacs 13Deebot T10 Firmware Deebot T10 Omni FirmwareDeebot T10 Plus Firmware+10 more Jun 17, 2026 Sep 5, 2025 7.5 HIGH· v4 7.2 HIGH· v3 N/A· v2 ECOVACS vacuum robot base stations do not validate firmware updates, so malicious over-the-air updates can be sent to base station via insecure connection between robot and base station.
CVE-2025-30198 1Ecovacs 13Deebot T10 Firmware Deebot T10 Omni FirmwareDeebot T10 Plus Firmware+10 more Jun 17, 2026 Sep 5, 2025 2.3 LOW· v4 6.3 MEDIUM· v3 N/A· v2 ECOVACS robot vacuums and base stations communicate via an insecure Wi-Fi network with a deterministic WPA2-PSK, which can be easily derived.
CVE-2024-52331 1Ecovacs 14Airbot Andy Firmware Airbot Ava FirmwareAirbot Z1 Firmware+11 more Jun 17, 2026 Jan 23, 2025 7.7 HIGH· v4 7.5 HIGH· v3 N/A· v2 ECOVACS robot lawnmowers and vacuums use a deterministic symmetric key to decrypt firmware updates. An attacker can create and encrypt malicious firmware that will be successfully decrypted and installed by the robot.
CVE-2024-52330 1Ecovacs 20Deebot T10 Firmware Deebot T10 Omni FirmwareDeebot T10 Plus Firmware+17 more Jun 17, 2026 Jan 23, 2025 9.5 CRITICAL· v4 7.4 HIGH· v3 N/A· v2 ECOVACS lawnmowers and vacuums do not properly validate TLS certificates. An unauthenticated attacker can read or modify TLS traffic, possibly modifying firmware updates.
CVE-2024-52329 1Ecovacs 1Home Jun 17, 2026 Jan 23, 2025 9.5 CRITICAL· v4 7.4 HIGH· v3 N/A· v2 ECOVACS HOME mobile app plugins for specific robots do not properly validate TLS certificates. An unauthenticated attacker can read or modify TLS traffic and obtain authentication tokens.
CVE-2024-52328 1Ecovacs 14Airbot Andy Firmware Airbot Ava FirmwareAirbot Z1 Firmware+11 more Jun 17, 2026 Jan 23, 2025 1.8 LOW· v4 2.3 LOW· v3 N/A· v2 ECOVACS robot lawnmowers and vacuums insecurely store audio files used to indicate that the camera is on. An attacker with access to the /data filesystem can delete or modify warning files such that users may not be awar...Show more ECOVACS robot lawnmowers and vacuums insecurely store audio files used to indicate that the camera is on. An attacker with access to the /data filesystem can delete or modify warning files such that users may not be aware that the camera is on.Show less
CVE-2024-52327 1Ecovacs 1Home Jun 17, 2026 Jan 23, 2025 6.0 MEDIUM· v4 6.5 MEDIUM· v3 N/A· v2 The cloud service used by ECOVACS robot lawnmowers and vacuums allows authenticated attackers to bypass the PIN entry required to access the live video feed.
CVE-2024-12079 1Ecovacs 14Airbot Andy Firmware Airbot Ava FirmwareAirbot Z1 Firmware+11 more Jun 17, 2026 Jan 23, 2025 4.8 MEDIUM· v4 3.3 LOW· v3 N/A· v2 ECOVACS robot lawnmowers store the anti-theft PIN in cleartext on the device filesystem. An attacker can steal a lawnmower, read the PIN, and reset the anti-theft mechanism.
CVE-2024-12078 1Ecovacs 14Airbot Andy Firmware Airbot Ava FirmwareAirbot Z1 Firmware+11 more Jun 17, 2026 Jan 23, 2025 5.3 MEDIUM· v4 6.3 MEDIUM· v3 N/A· v2 ECOVACS robot lawn mowers and vacuums use a shared, static secret key to encrypt BLE GATT messages. An unauthenticated attacker within BLE range can control any robot using the same key.
CVE-2024-11147 1Ecovacs 14Airbot Andy Firmware Airbot Ava FirmwareAirbot Z1 Firmware+11 more Jun 17, 2026 Jan 23, 2025 7.0 HIGH· v4 7.6 HIGH· v3 N/A· v2 ECOVACS robot lawnmowers and vacuums use a deterministic root password generated based on model and serial number. An attacker with shell access can login as root.
CVE-2024-52325 1Ecovacs 12Deebot T30 Omni Firmware Deebot T30s FirmwareDeebot X2 Combo Firmware+9 more Jun 17, 2026 Jan 23, 2025 5.8 MEDIUM· v4 9.6 CRITICAL· v3 N/A· v2 ECOVACS robot lawnmowers and vacuums are vulnerable to command injection via SetNetPin() over an unauthenticated BLE connection.