ECOVACS vulnerabilities
13 published CVEs name ECOVACS among the affected products.
- 13Published CVEs13 of them scored
- 0Last 12 monthspublished in the last year
- 2Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2025-30198
ECOVACS Vacuum and Base Station Hard-Coded WPA2-PSK
ECOVACS · DEEBOT X1 Series
Low2.3 - CVE-2025-30199
ECOVACS Vacuum and Base Station accept unsigned firmware
ECOVACS · DEEBOT X1 Series
High7.5 - CVE-2025-30200
ECOVACS Vacuum and Base Station Hard-Coded AES Encryption
ECOVACS · DEEBOT X1 Series
Low2.3 - CVE-2025-2394
Disclosure of Alibaba (OSS) Keys In Ecovacs Home Android and iOS Mobile Applications
Ecovacs · Ecovacs Mobile and Android Application
Medium4.7 - CVE-2024-52327
ECOVACS lawnmower and vacuum cloud service live video PIN bypass
ECOVACS · ECOVACS HOME
Medium6.0 - CVE-2024-12079
ECOVACS lawnmowers cleartext storage of anti-theft PIN
ECOVACS · Unspecified robots
Medium4.8 - CVE-2024-12078
ECOVACS lawnmowers and vacuums static BLE GATT encryption key
ECOVACS · Unspecified robots
Medium5.3 - CVE-2024-11147
ECOVACS lawnmowers and vacuums deterministic root password
ECOVACS · Unspecified robots
High7.0 - CVE-2024-52331
ECOVACS lawnmowers and vacuums deterministic firmware encryption key
ECOVACS · Unspecified robots
High7.7 - CVE-2024-52330
ECOVACS lawnmowers and vacuums do not properly validate TLS certificates
ECOVACS · DEEBOT X5 PRO PLUS
Critical9.5