CVE Catalog
CVE-2025-30200
MediumCVSS 6.3Exploitation Probability (EPSS)
Low risk0.14%
3th percentile - higher than 3% of all known CVEs
Summary
ECOVACS robot vacuums and base stations communicate via an insecure Wi-Fi network with a deterministic AES encryption key, which can be easily derived.
Risk Assessment
An attacker within network range could derive the encryption key and intercept or modify device communication, potentially leading to privacy breaches or device takeover.
Recommendation
Update ECOVACS device firmware to a version with a fixed encryption mechanism, or restrict access to the Wi-Fi network used by the devices.
Other vulnerabilities in ECOVACS robot vacuums and base stations
Original NVD description (English source)
ECOVACS robot vacuums and base stations communicate via an insecure Wi-Fi network with a deterministic AES encryption key, which can be easily derived.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS