Ecovacs to Address Security Flaws in Home Robots After Researcher Findings

Earlier this month, security researchers highlighted a series of vulnerabilities in Ecovacs' vacuum and lawn mower robots that could potentially allow hackers to spy on users through the devices’ microphones and cameras. Initially, Ecovacs responded by downplaying the risks, stating that the vulnerabilities were "extremely rare in typical user environments" and required "specialized hacking tools and physical access to the device."

However, two weeks later, Ecovacs revised its stance. The company announced it would address the identified security flaws after conducting a thorough review. Martin Ma, director of Ecovacs’ security committee, acknowledged that the researchers' findings had prompted the company to take action. "We have conducted an in-depth verification and self-examination and identified several areas for improvement," Ma said. “We have initiated targeted improvements to address the issues highlighted.”

On August 10, researchers Dennis Giese and Braelynn presented their findings on Ecovacs' home robots at the annual Def Con hacking conference in Las Vegas. Their analysis of 11 Ecovacs devices uncovered multiple flaws. Notably, they identified a vulnerability that allowed a phone to connect to an Ecovacs robot via Bluetooth from up to 450 feet (approximately 130 meters) away, enabling hackers to control the device and monitor it remotely over Wi-Fi. Other issues included a bug that permitted access to a robot vacuum even after the previous owner deleted their account, potentially allowing hackers to spy on new users.

In response to the researchers' presentation, Ma reached out to address the oversight of previous communications from December 2023. The company has now committed to fixing issues in two specific Ecovacs models, the Goat G1 and the X1, as well as updating the Ecovacs app. Ma expressed appreciation for the researchers’ efforts, noting that their insights are crucial for enhancing the security and integrity of Ecovacs' products, ultimately benefiting consumers.