← IoT Privacy Database

Ecovacs Deebot

Ecovacs Robotics · Robot Vacuum

✓ Reviewed

7.3Surveillance
Index
Policy — what its policy permitsF
Evidence — what research provesF

Onboard camera and microphone were remotely accessed by a security researcher over Bluetooth from up to 140 meters away, streaming photos and audio to a US server without the owner's knowledge.

Why this rating

Ecovacs Deebot's onboard camera and microphone were remotely accessed by an independent security researcher over Bluetooth from up to 140 meters away, and CISA issued a formal advisory (ICSA-25-135-19) confirming the vulnerabilities.

What it is

Manufacturer
Ecovacs Robotics
Category
Robot Vacuum
Model years
2017-present
Market status
Current
Companion app
Ecovacs Home

The evidence 2

Independent research, regulatory action, lawsuits, breaches and journalism about this device — the "what actually happens" axis. Each links to its source.

  1. Security advisory · Cybersecurity and Infrastructure Security Agency · 2025-05-15

    CISA advisory detailing vulnerabilities in Ecovacs robot vacuums and lawn mowers that could allow unauthorized camera/microphone access and movement control.

    Why it matters here: CISA advisory specifically covers Ecovacs vacuum vulnerabilities enabling camera/microphone access.

  2. Security advisory · ABC News (Australia) · 2024-10-04

    Report on security researcher Dennis Giese's demonstration of remotely accessing an Ecovacs robot vacuum's camera and microphone over Bluetooth from up to 140 meters away.

    Why it matters here: Direct demonstration of remote camera/microphone access on an Ecovacs Deebot unit.

Descriptive, cited, not legal advice; ratings are versioned and corrections create a new version. Data from the IoT Info Grabber DB research project, CC BY-SA 4.0.

← Back to the IoT Privacy Database