CVE-2025-30199

🗓️ 05 Sep 2025 18:15:39Reported by [email protected]Type

ECOVACS base stations do not validate firmware updates, enabling malicious over-the-air updates via insecure link.

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2025-30199	15 May 202510:00	–	circl
CNNVD	ECOVACS robot vacuums 安全漏洞	5 Sep 202500:00	–	cnnvd
CVE	CVE-2025-30199	5 Sep 202517:45	–	cve
Cvelist	CVE-2025-30199 ECOVACS Vacuum and Base Station accept unsigned firmware	5 Sep 202517:45	–	cvelist
EUVD	EUVD-2025-27021	3 Oct 202520:07	–	euvd
OSV	CVE-2025-30199	5 Sep 202518:15	–	osv
Positive Technologies	PT-2025-36259	5 Sep 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-30199	7 Sep 202518:11	–	redhatcve
Vulnrichment	CVE-2025-30199 ECOVACS Vacuum and Base Station accept unsigned firmware	5 Sep 202517:45	–	vulnrichment

NVD

Node

ecovacs deebot_x1s_pro_firmwareRange<2.5.38

AND

ecovacs deebot_x1s_proMatch-

Node

ecovacs deebot_x1_pro_omni_firmwareRange<2.5.38

AND

ecovacs deebot_x1_pro_omniMatch-

Node

ecovacs deebot_x1_omni_firmwareRange<2.4.45

AND

ecovacs deebot_x1_omniMatch-

Node

ecovacs deebot_x1s_pro_firmwareRange<2.4.45

AND

ecovacs deebot_x1s_proMatch-

Node

ecovacs deebot_x1_turbo_firmwareRange<2.5.38

AND

ecovacs deebot_x1_turboMatch-

Node

ecovacs deebot_x1s_pro_firmwareRange<2.4.45

AND

ecovacs deebot_x1s_proMatch-

Node

ecovacs deebot_t10_firmwareRange<1.11.0

AND

ecovacs deebot_t10Match-

Node

ecovacs deebot_t10_omni_firmwareRange<1.11.0

AND

ecovacs deebot_t10_omniMatch-

Node

ecovacs deebot_t10_plus_firmwareRange<1.11.0

AND

ecovacs deebot_t10_plusMatch-

Node

ecovacs deebot_t10_turbo_firmwareRange<1.11.0

AND

ecovacs deebot_t10_turboMatch-

Node

ecovacs deebot_t20_omni_firmwareRange<1.25.0

AND

ecovacs deebot_t20_omniMatch-

Node

ecovacs deebot_t20_pro_plus_firmwareRange<1.25.0

AND

ecovacs deebot_t20_pro_plusMatch-

Node

ecovacs deebot_t20_pro_firmwareRange<1.25.0

AND

ecovacs deebot_t20_proMatch-

Node

ecovacs deebot_t30_omni_firmwareRange<1.100.0

AND

ecovacs deebot_t30_omniMatch-

Node

ecovacs deebot_t30s_firmwareRange<1.100.0

AND

ecovacs deebot_t30sMatch-

Source	Link
github	www.github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-135-19.json
cve	www.cve.org/CVERecord
cisa	www.cisa.gov/news-events/ics-advisories/icsa-25-135-19

23 Sep 2025 17:11Current

CVSS 3.17.2

CVSS 47.5

EPSS0.00044

CWE-494