Description
ECOVACS robot vacuums and base stations communicate via an insecure Wi-Fi network with a deterministic WPA2-PSK, which can be easily derived.
References (3)
Scores
CVSS v3
6.3
EPSS
0.0002
EPSS Percentile
5.9%
Attack Vector
ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-321
CWE-798
Status
published
Products (13)
ecovacs/deebot_t10_firmware
< 1.11.0
ecovacs/deebot_t10_omni_firmware
< 1.11.0
ecovacs/deebot_t10_plus_firmware
< 1.11.0
ecovacs/deebot_t10_turbo_firmware
< 1.11.0
ecovacs/deebot_t20_omni_firmware
< 1.25.0
ecovacs/deebot_t20_pro_firmware
< 1.25.0
ecovacs/deebot_t20_pro_plus_firmware
< 1.25.0
ecovacs/deebot_t30_omni_firmware
< 1.100.0
ecovacs/deebot_t30s_firmware
< 1.100.0
ecovacs/deebot_x1_omni_firmware
< 2.4.45
... and 3 more
Published
Sep 05, 2025
Tracked Since
Feb 18, 2026