What’s Vulnerable › Vulnerabilities

CVE-2025-30200: ECOVACS Vacuum and Base Station Hard-Coded AES Encryption

• Severity: medium (CVSS 6.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-09-05 · updated 2026-10-18
• Weakness: CWE-321

Description

ECOVACS robot vacuums and base stations communicate via an insecure Wi-Fi network with a deterministic AES encryption key, which can be easily derived.

Affected products

• ECOVACS Deebot T10 Firmware: before 1.11.0 — fixed in 1.11.0
• ECOVACS Deebot T10 Omni Firmware: before 1.11.0 — fixed in 1.11.0
• ECOVACS Deebot T10 Plus Firmware: before 1.11.0 — fixed in 1.11.0
• ECOVACS Deebot T10 Turbo Firmware: before 1.11.0 — fixed in 1.11.0
• ECOVACS Deebot T20 Omni Firmware: before 1.25.0 — fixed in 1.25.0
• ECOVACS Deebot T20 Pro Firmware: before 1.25.0 — fixed in 1.25.0
• ECOVACS Deebot T20 Pro Plus Firmware: before 1.25.0 — fixed in 1.25.0
• ECOVACS Deebot T30 Omni Firmware: before 1.100.0 — fixed in 1.100.0
• ECOVACS Deebot T30S Firmware: before 1.100.0 — fixed in 1.100.0
• ECOVACS Deebot X1 Omni Firmware: before 2.4.45 — fixed in 2.4.45
• ECOVACS Deebot X1 Pro Omni Firmware: before 2.5.38 — fixed in 2.5.38
• ECOVACS Deebot X1 Turbo Firmware: before 2.5.38 — fixed in 2.5.38
• ECOVACS Deebot X1S Pro Firmware: before 2.5.38; before 2.4.45 — fixed in 2.4.45, 2.5.38

How to fix

Upgrade to a fixed version: ECOVACS Deebot T10 Firmware 1.11.0; ECOVACS Deebot T10 Omni Firmware 1.11.0; ECOVACS Deebot T10 Plus Firmware 1.11.0; ECOVACS Deebot T10 Turbo Firmware 1.11.0; ECOVACS Deebot T20 Omni Firmware 1.25.0; ECOVACS Deebot T20 Pro Firmware 1.25.0; ECOVACS Deebot T20 Pro Plus Firmware 1.25.0; ECOVACS Deebot T30 Omni Firmware 1.100.0; ECOVACS Deebot T30S Firmware 1.100.0; ECOVACS Deebot X1 Omni Firmware 2.4.45; ECOVACS Deebot X1 Pro Omni Firmware 2.5.38; ECOVACS Deebot X1 Turbo Firmware 2.5.38. Check the vendor advisory for mitigations.

References

• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-135-19.json
• https://www.cisa.gov/news-events/ics-advisories/icsa-25-135-19
• https://www.cve.org/CVERecord?id=CVE-2025-30200

Get alerted when CVE-2025-30200 or the next vulnerability affects your stack