Ecovacs
9 CVEs tracked since 2025. Since Jan 2025, none of them reached CISA KEV.
Ecovacs CVEs per month
| Month | CVEs | In CISA KEV |
|---|---|---|
| 2025-01 | 9 | 0 |
Products
The products that kept showing up in Ecovacs's monthly top three, with their CVEs summed over those months.
Latest CVEs
The 13 most recently published vulnerabilities affecting Ecovacs.
- CVE-2025-30198ECOVACS Vacuum and Base Station Hard-Coded WPA2-PSK6.3
- CVE-2025-30199ECOVACS Vacuum and Base Station accept unsigned firmware7.2
- CVE-2025-30200ECOVACS Vacuum and Base Station Hard-Coded AES Encryption6.3
- CVE-2025-2394Disclosure of Alibaba (OSS) Keys In Ecovacs Home Android and iOS Mobile Applications—
- CVE-2024-52327ECOVACS lawnmower and vacuum cloud service live video PIN bypass6.5
- CVE-2024-12079ECOVACS lawnmowers cleartext storage of anti-theft PIN3.3
- CVE-2024-12078ECOVACS lawnmowers and vacuums static BLE GATT encryption key6.3
- CVE-2024-11147ECOVACS lawnmowers and vacuums deterministic root password7.6
- CVE-2024-52331ECOVACS lawnmowers and vacuums deterministic firmware encryption key7.5
- CVE-2024-52330ECOVACS lawnmowers and vacuums do not properly validate TLS certificates7.4
- CVE-2024-52329ECOVACS HOME mobile app plugins do not properly validate TLS certificates7.4
- CVE-2024-52328ECOVACS lawnmowers and vacuums insecurely store audio warning files2.3
- CVE-2024-52325ECOVACS robot lawnmowers and vacuums command injection9.6
The record
- Peak rank
- #91 in Jan 2025
- Busiest month shown
- Jan 2025, 9 CVEs
- Months with a KEV entry
- 0 since Jan 2025
- Monthly snapshots
- 1 since 2025