CVE-2025-30198

🗓️ 05 Sep 2025 17:45:36Reported by cisa-cgType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 24 Views

ECOVACS vacuums and base stations use a hard-coded WPA2-PSK in an insecure Wi-Fi network.

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2025-30198	15 May 202510:00	–	circl
CNNVD	ECOVACS robot vacuums 安全漏洞	5 Sep 202500:00	–	cnnvd
Cvelist	CVE-2025-30198 ECOVACS Vacuum and Base Station Hard-Coded WPA2-PSK	5 Sep 202517:45	–	cvelist
EUVD	EUVD-2025-27020	3 Oct 202520:07	–	euvd
NVD	CVE-2025-30198	5 Sep 202518:15	–	nvd
OSV	CVE-2025-30198	5 Sep 202518:15	–	osv
Positive Technologies	PT-2025-21744	16 May 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-30198	7 Sep 202518:11	–	redhatcve
Vulnrichment	CVE-2025-30198 ECOVACS Vacuum and Base Station Hard-Coded WPA2-PSK	5 Sep 202517:45	–	vulnrichment

NVD

Node

ecovacs deebot_x1s_pro_firmwareRange<2.5.38

AND

ecovacs deebot_x1s_proMatch-

Node

ecovacs deebot_x1_pro_omni_firmwareRange<2.5.38

AND

ecovacs deebot_x1_pro_omniMatch-

Node

ecovacs deebot_x1_omni_firmwareRange<2.4.45

AND

ecovacs deebot_x1_omniMatch-

Node

ecovacs deebot_x1s_pro_firmwareRange<2.4.45

AND

ecovacs deebot_x1s_proMatch-

Node

ecovacs deebot_x1_turbo_firmwareRange<2.5.38

AND

ecovacs deebot_x1_turboMatch-

Node

ecovacs deebot_x1s_pro_firmwareRange<2.4.45

AND

ecovacs deebot_x1s_proMatch-

Node

ecovacs deebot_t10_firmwareRange<1.11.0

AND

ecovacs deebot_t10Match-

Node

ecovacs deebot_t10_omni_firmwareRange<1.11.0

AND

ecovacs deebot_t10_omniMatch-

Node

ecovacs deebot_t10_plus_firmwareRange<1.11.0

AND

ecovacs deebot_t10_plusMatch-

Node

ecovacs deebot_t10_turbo_firmwareRange<1.11.0

AND

ecovacs deebot_t10_turboMatch-

Node

ecovacs deebot_t20_omni_firmwareRange<1.25.0

AND

ecovacs deebot_t20_omniMatch-

Node

ecovacs deebot_t20_pro_plus_firmwareRange<1.25.0

AND

ecovacs deebot_t20_pro_plusMatch-

Node

ecovacs deebot_t20_pro_firmwareRange<1.25.0

AND

ecovacs deebot_t20_proMatch-

Node

ecovacs deebot_t30_omni_firmwareRange<1.100.0

AND

ecovacs deebot_t30_omniMatch-

Node

ecovacs deebot_t30s_firmwareRange<1.100.0

AND

ecovacs deebot_t30sMatch-

[
  {
    "vendor": "ECOVACS",
    "product": "DEEBOT X1 Series",
    "defaultStatus": "unknown",
    "versions": [
      {
        "version": "*",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "ECOVACS",
    "product": "DEEBOT T20 Series",
    "defaultStatus": "unknown",
    "versions": [
      {
        "version": "*",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "ECOVACS",
    "product": "DEEBOT T10 Series",
    "defaultStatus": "unknown",
    "versions": [
      {
        "version": "*",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "ECOVACS",
    "product": "DEEBOT T30 Series",
    "defaultStatus": "unknown",
    "versions": [
      {
        "version": "*",
        "status": "affected"
      }
    ]
  }
]

Source	Link
cisa	www.cisa.gov/news-events/ics-advisories/icsa-25-135-19
github	www.github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-135-19.json
cve	www.cve.org/CVERecord

23 Sep 2025 17:11Current

6.4Medium risk

Vulners AI Score6.4

CVSS 42.3

CVSS 3.16.3

EPSS0.0003

SSVC