ECOVACS DEEBOT T10
Approved changes feed: RSS · Atom
cpe:2.3:h:ecovacs:deebot_t10:-:*:*:*:*:*:*:*
part: h version: - update: *
| Vendor | Ecovacs (970385e2-1d45-53ea-a811-676ddc52336f) |
|---|---|
| Product | Deebot T10 (44ff35f2-b793-59a5-9874-2d1717b7c8cf) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-30200 |
not_vulnerable | 2026-06-08 07:16:59.265515 |
ECOVACS Vacuum and Base Station Hard-Coded AES Encryption
MEDIUM (6.3)
ECOVACS robot vacuums and base stations communicate via an insecure Wi-Fi network with a deterministic AES encryption key, which can be easily derived.
Published: 2025-09-05T17:43:20.802Z
Updated: 2025-09-08T18:22:21.457Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-30199 |
not_vulnerable | 2026-06-08 07:16:59.262807 |
ECOVACS Vacuum and Base Station accept unsigned firmware
HIGH (7.2)
ECOVACS vacuum robot base stations do not validate firmware updates, so malicious over-the-air updates can be sent to base station via insecure connection between robot and base station.
Published: 2025-09-05T17:45:07.227Z
Updated: 2025-09-08T18:21:06.626Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-30198 |
not_vulnerable | 2026-06-08 07:16:59.248282 |
ECOVACS Vacuum and Base Station Hard-Coded WPA2-PSK
MEDIUM (6.3)
ECOVACS robot vacuums and base stations communicate via an insecure Wi-Fi network with a deterministic WPA2-PSK, which can be easily derived.
Published: 2025-09-05T17:45:36.945Z
Updated: 2025-09-08T18:20:26.088Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-52331 |
not_vulnerable | 2026-06-08 06:52:14.899316 |
ECOVACS lawnmowers and vacuums deterministic firmware encryption key
HIGH (7.5)
ECOVACS robot lawnmowers and vacuums use a deterministic symmetric key to decrypt firmware updates. An attacker can create and encrypt malicious firmware that will be successfully decrypted and installed by the robot.
Published: 2025-01-23T16:37:31.290Z
Updated: 2025-10-02T14:10:10.821Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-52330 |
not_vulnerable | 2026-06-08 06:52:14.895494 |
ECOVACS lawnmowers and vacuums do not properly validate TLS certificates
HIGH (7.4)
ECOVACS lawnmowers and vacuums do not properly validate TLS certificates. An unauthenticated attacker can read or modify TLS traffic, possibly modifying firmware updates.
Published: 2025-01-23T16:36:50.128Z
Updated: 2025-02-12T20:41:28.969Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-52328 |
not_vulnerable | 2026-06-08 06:52:14.855726 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-12079 |
not_vulnerable | 2026-06-08 06:23:51.124515 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-12078 |
not_vulnerable | 2026-06-08 06:23:51.121829 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-11147 |
not_vulnerable | 2026-06-08 06:23:48.897591 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.