Use of Hard-coded Cryptographic Key
CVE-2025-30198
Summary
ECOVACS robot vacuums and base stations communicate via an insecure Wi-Fi network with a deterministic WPA2-PSK, which can be easily derived.
- LOW
- ADJACENT_NETWORK
- LOW
- UNCHANGED
- NONE
- NONE
- LOW
- LOW
CWE-321 - Use of Hard-coded Cryptographic Key
The use of a hard-coded cryptographic key significantly increases the possibility that encrypted data may be recovered.
References
Advisory Timeline
- Published