← Database

CVE-2025-30199

HIGH CVSS: 7.2 Published: 2025-09-05 Modified: 2026-06-17

Description

ECOVACS vacuum robot base stations do not validate firmware updates, so malicious over-the-air updates can be sent to base station via insecure connection between robot and base station.

Affected Platforms

Ecovacs Deebot T20 Pro FirmwareEcovacs Deebot X1 Omni FirmwareEcovacs Deebot T10Ecovacs Deebot X1 Pro OmniEcovacs Deebot T30S FirmwareEcovacs Deebot T10 Omni FirmwareEcovacs Deebot T10 Plus FirmwareEcovacs Deebot X1S ProEcovacs Deebot T30 OmniEcovacs Deebot X1 Turbo

Weakness Type

CWE-494

References