Ecovacs Deebot T20 Omni Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Ecovacs Deebot T20 Omni Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2025-30199 — CVSS 7.2 (high): ECOVACS vacuum robot base stations do not validate firmware updates, so malicious over-the-air updates can be sent to base station via…
• CVE-2025-30198 — CVSS 6.3 (medium): ECOVACS robot vacuums and base stations communicate via an insecure Wi-Fi network with a deterministic WPA2-PSK, which can be easily…
• CVE-2025-30200 — CVSS 6.3 (medium): ECOVACS robot vacuums and base stations communicate via an insecure Wi-Fi network with a deterministic AES encryption key, which can be…