CVE Catalog
CVE-2025-30198
MediumCVSS 6.3Exploitation Probability (EPSS)
Low risk0.22%
11th percentile - higher than 11% of all known CVEs
Summary
ECOVACS robot vacuums and base stations communicate via an insecure Wi-Fi network with a deterministic WPA2-PSK that can be easily derived.
Risk Assessment
An attacker within network range could intercept communication or gain network access, potentially leading to privacy breaches or device control.
Recommendation
Update ECOVACS device firmware to a version that fixes the issue, or configure them on an isolated Wi-Fi network.
Other vulnerabilities in ECOVACS robot vacuums and base stations
Original NVD description (English source)
ECOVACS robot vacuums and base stations communicate via an insecure Wi-Fi network with a deterministic WPA2-PSK, which can be easily derived.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS