Vulnerabilidades do Ecovacs Deebot X1s Pro Firmware

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Ecovacs Deebot X1s Pro Firmware: 3 registro(s), com versões afetadas e correções.
cpe:2.3:o:ecovacs:deebot_x1s_pro_firmware

CVE-2025-30200 Média · 6.3 CWE-321 05/09/2025

ECOVACS Vacuum and Base Station Hard-Coded AES Encryption

ECOVACS robot vacuums and base stations communicate via an insecure Wi-Fi network with a deterministic AES encryption key, which can be easily derived.

CVE-2025-30199 Alta · 7.2 CWE-494 05/09/2025

ECOVACS Vacuum and Base Station accept unsigned firmware

ECOVACS vacuum robot base stations do not validate firmware updates, so malicious over-the-air updates can be sent to base station via insecure connection between robot and base station.

CVE-2025-30198 Média · 6.3 CWE-798 05/09/2025

ECOVACS Vacuum and Base Station Hard-Coded WPA2-PSK

ECOVACS robot vacuums and base stations communicate via an insecure Wi-Fi network with a deterministic WPA2-PSK, which can be easily derived.