Log in Start free

ECOVACS

Products

ProductCVEsExploitedLatest
Unspecified robots5–Jan 23, 2025
DEEBOT T10 Series3–Sep 5, 2025
DEEBOT T20 Series3–Sep 5, 2025
DEEBOT X1 Series3–Sep 5, 2025
DEEBOT T30 Series3–Sep 5, 2025
DEEBOT X2 OMNI2–Jan 23, 2025
DEEBOT X2S2–Jan 23, 2025
DEEBOT X5 PRO2–Jan 23, 2025
DEEBOT X2 COMBO2–Jan 23, 2025
DEEBOT X5 PRO PLUS2–Jan 23, 2025
DEEBOT X5 PRO ULTRA2–Jan 23, 2025
ECOVACS HOME2–Jan 23, 2025
DEEBOT X1e OMNI1–Jan 23, 2025
cloud service1–Jan 23, 2025
DEEBOT X1S PRO PLUS1–Jan 23, 2025
DEEBOT X2 PRO1–Jan 23, 2025
Ecovacs Mobile and Android Application1–May 23, 2025
GOAT G11–Jan 23, 2025
GOAT G1-20001–Jan 23, 2025
GOAT G1-8001–Jan 23, 2025
GOAT GX-6001–Jan 23, 2025
Mate X1–Jan 23, 2025
DEEBOT X1S PRO1–Jan 23, 2025
DEEBOT T101–Jan 23, 2025
DEEBOT T10 OMNI1–Jan 23, 2025
DEEBOT T10 PLUS1–Jan 23, 2025
DEEBOT T10 TURBO1–Jan 23, 2025
DEEBOT T30 OMNI1–Jan 23, 2025
DEEBOT T30S1–Jan 23, 2025
DEEBOT X11–Jan 23, 2025
DEEBOT X1 OMNI1–Jan 23, 2025
DEEBOT X1 PLUS1–Jan 23, 2025
DEEBOT X1 PRO OMNI1–Jan 23, 2025
DEEBOT X1 TURBO1–Jan 23, 2025

Exploited and recent CVEs

  • CVE-2025-30198 Medium 6.3 ECOVACS Vacuum and Base Station Hard-Coded WPA2-PSK 0.2%
  • CVE-2025-30198 Medium 6.3 ECOVACS Vacuum and Base Station Hard-Coded WPA2-PSK 0.2%
  • CVE-2025-30198 Medium 6.3 ECOVACS Vacuum and Base Station Hard-Coded WPA2-PSK 0.2%
  • CVE-2025-30198 Medium 6.3 ECOVACS Vacuum and Base Station Hard-Coded WPA2-PSK 0.2%
  • CVE-2025-30199 High 7.2 ECOVACS Vacuum and Base Station accept unsigned firmware 0.3%
  • CVE-2025-30199 High 7.2 ECOVACS Vacuum and Base Station accept unsigned firmware 0.3%
  • CVE-2025-30199 High 7.2 ECOVACS Vacuum and Base Station accept unsigned firmware 0.3%
  • CVE-2025-30199 High 7.2 ECOVACS Vacuum and Base Station accept unsigned firmware 0.3%
  • CVE-2025-30200 Medium 6.3 ECOVACS Vacuum and Base Station Hard-Coded AES Encryption 0.1%
  • CVE-2025-30200 Medium 6.3 ECOVACS Vacuum and Base Station Hard-Coded AES Encryption 0.1%
  • CVE-2025-30200 Medium 6.3 ECOVACS Vacuum and Base Station Hard-Coded AES Encryption 0.1%
  • CVE-2025-30200 Medium 6.3 ECOVACS Vacuum and Base Station Hard-Coded AES Encryption 0.1%
  • CVE-2025-2394 Medium 4.7 Disclosure of Alibaba (OSS) Keys In Ecovacs Home Android and iOS Mobile Applications 0.2%
  • CVE-2024-52327 Medium 6.5 ECOVACS lawnmower and vacuum cloud service live video PIN bypass 0.5%
  • CVE-2024-52327 Medium 6.5 ECOVACS lawnmower and vacuum cloud service live video PIN bypass 0.5%
  • CVE-2024-12079 Low 3.3 ECOVACS lawnmowers cleartext storage of anti-theft PIN 0.2%
  • CVE-2024-12078 Medium 6.3 ECOVACS lawnmowers and vacuums static BLE GATT encryption key 0.3%
  • CVE-2024-11147 High 7.6 ECOVACS lawnmowers and vacuums deterministic root password 0.4%
  • CVE-2024-52331 High 7.5 ECOVACS lawnmowers and vacuums deterministic firmware encryption key 0.2%
  • CVE-2024-52330 High 7.4 ECOVACS lawnmowers and vacuums do not properly validate TLS certificates 0.4%
  • CVE-2024-52330 High 7.4 ECOVACS lawnmowers and vacuums do not properly validate TLS certificates 0.4%
  • CVE-2024-52330 High 7.4 ECOVACS lawnmowers and vacuums do not properly validate TLS certificates 0.4%
  • CVE-2024-52330 High 7.4 ECOVACS lawnmowers and vacuums do not properly validate TLS certificates 0.4%
  • CVE-2024-52330 High 7.4 ECOVACS lawnmowers and vacuums do not properly validate TLS certificates 0.4%
  • CVE-2024-52330 High 7.4 ECOVACS lawnmowers and vacuums do not properly validate TLS certificates 0.4%
  • CVE-2024-52330 High 7.4 ECOVACS lawnmowers and vacuums do not properly validate TLS certificates 0.4%
  • CVE-2024-52330 High 7.4 ECOVACS lawnmowers and vacuums do not properly validate TLS certificates 0.4%
  • CVE-2024-52330 High 7.4 ECOVACS lawnmowers and vacuums do not properly validate TLS certificates 0.4%
  • CVE-2024-52330 High 7.4 ECOVACS lawnmowers and vacuums do not properly validate TLS certificates 0.4%
  • CVE-2024-52330 High 7.4 ECOVACS lawnmowers and vacuums do not properly validate TLS certificates 0.4%