CVE-2025-30200
Medium
Description
ECOVACS robot vacuums and base stations communicate via an insecure Wi-Fi network with a deterministic AES encryption key, which can be easily derived.
SeverityMedium
CVSS6.3
Exploit probability—
ProductEcovacs Deebot X1s Pro Firmware
PublishedSep 5, 2025
First seenSep 5, 2025
Weakness typeCWE-321CWE-321CWE-798Hard-coded credentials
How to fix
Update
- ecovacs deebot_x1s_pro_firmware2.5.38, 2.4.45 or later
- ecovacs deebot_x1_pro_omni_firmware2.5.38 or later
- ecovacs deebot_x1_omni_firmware2.4.45 or later
- ecovacs deebot_x1_turbo_firmware2.5.38 or later
- ecovacs deebot_t10_firmware1.11.0 or later
- ecovacs deebot_t10_omni_firmware1.11.0 or later
- ecovacs deebot_t10_plus_firmware1.11.0 or later
- ecovacs deebot_t10_turbo_firmware1.11.0 or later
- ecovacs deebot_t20_omni_firmware1.25.0 or later
- ecovacs deebot_t20_pro_plus_firmware1.25.0 or later
- ecovacs deebot_t20_pro_firmware1.25.0 or later
- ecovacs deebot_t30_omni_firmware1.100.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ecovacs deebot_x1s_pro_firmware | v < 2.5.38, v < 2.4.45 | 2.5.38, 2.4.45 |
| ecovacs deebot_x1_pro_omni_firmware | v < 2.5.38 | 2.5.38 |
| ecovacs deebot_x1_omni_firmware | v < 2.4.45 | 2.4.45 |
| ecovacs deebot_x1_turbo_firmware | v < 2.5.38 | 2.5.38 |
| ecovacs deebot_t10_firmware | v < 1.11.0 | 1.11.0 |
| ecovacs deebot_t10_omni_firmware | v < 1.11.0 | 1.11.0 |
| ecovacs deebot_t10_plus_firmware | v < 1.11.0 | 1.11.0 |
| ecovacs deebot_t10_turbo_firmware | v < 1.11.0 | 1.11.0 |
| ecovacs deebot_t20_omni_firmware | v < 1.25.0 | 1.25.0 |
| ecovacs deebot_t20_pro_plus_firmware | v < 1.25.0 | 1.25.0 |
| ecovacs deebot_t20_pro_firmware | v < 1.25.0 | 1.25.0 |
| ecovacs deebot_t30_omni_firmware | v < 1.100.0 | 1.100.0 |
| ecovacs deebot_t30s_firmware | v < 1.100.0 | 1.100.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.