CVE-2025-30199

🗓️ 05 Sep 2025 17:45:07Reported by cisa-cgType

Ecovacs base stations accept unsigned firmware, enabling malicious over-the-air updates via insecure connection.

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2025-30199	15 May 202510:00	–	circl
CNNVD	ECOVACS robot vacuums 安全漏洞	5 Sep 202500:00	–	cnnvd
Cvelist	CVE-2025-30199 ECOVACS Vacuum and Base Station accept unsigned firmware	5 Sep 202517:45	–	cvelist
EUVD	EUVD-2025-27021	3 Oct 202520:07	–	euvd
NVD	CVE-2025-30199	5 Sep 202518:15	–	nvd
OSV	CVE-2025-30199	5 Sep 202518:15	–	osv
Positive Technologies	PT-2025-36259	5 Sep 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-30199	7 Sep 202518:11	–	redhatcve
Vulnrichment	CVE-2025-30199 ECOVACS Vacuum and Base Station accept unsigned firmware	5 Sep 202517:45	–	vulnrichment

NVD

Node

ecovacs deebot_x1s_pro_firmwareRange<2.5.38

AND

ecovacs deebot_x1s_proMatch-

Node

ecovacs deebot_x1_pro_omni_firmwareRange<2.5.38

AND

ecovacs deebot_x1_pro_omniMatch-

Node

ecovacs deebot_x1_omni_firmwareRange<2.4.45

AND

ecovacs deebot_x1_omniMatch-

Node

ecovacs deebot_x1s_pro_firmwareRange<2.4.45

AND

ecovacs deebot_x1s_proMatch-

Node

ecovacs deebot_x1_turbo_firmwareRange<2.5.38

AND

ecovacs deebot_x1_turboMatch-

Node

ecovacs deebot_x1s_pro_firmwareRange<2.4.45

AND

ecovacs deebot_x1s_proMatch-

Node

ecovacs deebot_t10_firmwareRange<1.11.0

AND

ecovacs deebot_t10Match-

Node

ecovacs deebot_t10_omni_firmwareRange<1.11.0

AND

ecovacs deebot_t10_omniMatch-

Node

ecovacs deebot_t10_plus_firmwareRange<1.11.0

AND

ecovacs deebot_t10_plusMatch-

Node

ecovacs deebot_t10_turbo_firmwareRange<1.11.0

AND

ecovacs deebot_t10_turboMatch-

Node

ecovacs deebot_t20_omni_firmwareRange<1.25.0

AND

ecovacs deebot_t20_omniMatch-

Node

ecovacs deebot_t20_pro_plus_firmwareRange<1.25.0

AND

ecovacs deebot_t20_pro_plusMatch-

Node

ecovacs deebot_t20_pro_firmwareRange<1.25.0

AND

ecovacs deebot_t20_proMatch-

Node

ecovacs deebot_t30_omni_firmwareRange<1.100.0

AND

ecovacs deebot_t30_omniMatch-

Node

ecovacs deebot_t30s_firmwareRange<1.100.0

AND

ecovacs deebot_t30sMatch-

[
  {
    "vendor": "ECOVACS",
    "product": "DEEBOT X1 Series",
    "defaultStatus": "unknown",
    "versions": [
      {
        "version": "*",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "ECOVACS",
    "product": "DEEBOT T20 Series",
    "defaultStatus": "unknown",
    "versions": [
      {
        "version": "*",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "ECOVACS",
    "product": "DEEBOT T10 Series",
    "defaultStatus": "unknown",
    "versions": [
      {
        "version": "*",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "ECOVACS",
    "product": "DEEBOT T30 Series",
    "defaultStatus": "unknown",
    "versions": [
      {
        "version": "*",
        "status": "affected"
      }
    ]
  }
]

Source	Link
cve	www.cve.org/CVERecord
cisa	www.cisa.gov/news-events/ics-advisories/icsa-25-135-19
github	www.github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-135-19.json

23 Sep 2025 17:11Current

6.4Medium risk

Vulners AI Score6.4

CVSS 3.17.2

CVSS 47.5

EPSS0.00044

SSVC

CWE-494