- Changes
- 2
- Tracking since
- Sep 2024
- Latest
- Sep 20, 2024
- Net movement
- Classification stable
- 2024
-
Security researchers disclose Bluetooth vulnerabilities affecting Ecovacs Deebot line
At DEF CON 32 in August 2024, security researchers publicly demonstrated Bluetooth-based vulnerabilities allowing unauthorized access to Ecovacs Deebot vacuums, including camera access and remote control on affected models.
Full assessment
AutonomyLIII unchangedReadinessReady Now heldScorePrivacy score pressuredThe N20 Pro+ launched into this disclosure context. Ecovacs responded with a statement indicating software fixes were in progress; watch for published firmware changelogs confirming the remediation applied to the N20 Pro+.
Impact on autonomy
- Demonstrated Bluetooth proximity exploit could allow unauthorized device control in the operating environment
- Cloud authentication weaknesses in the Ecovacs Home app backend were part of the reported attack surface
Impact on readiness
- Privacy concerns documented at point of N20 Pro+ commercial launch create buyer caution
- No confirmed N20 Pro+-specific patch timeline was published at the time of disclosure
- Owners relying on Ecovacs Home app for scheduling face cloud-dependent risk surface
Claim check3 claims reviewed
Secure cloud-connected home robotSecurity researchers at DEF CON 32 documented Bluetooth pairing exploits and cloud authentication weaknesses in Ecovacs Deebot models. The disclosures applied to the N-series lineup per researcher presentations.Ecovacs addressed all known security issuesEcovacs issued a public statement acknowledging the findings and committing to software updates. Specific firmware version numbers and rollout timelines for N20 Pro+ were not published in the initial response per media reporting.Camera-equipped models at risk; N20 Pro+ (no camera) not affected by video exploitThe N20 Pro+ has no onboard camera. The camera-access component of the exploit does not apply. The Bluetooth pairing and cloud authentication components were not model-specific per researcher documentation.Bottom lineThe N20 Pro+ lacks a camera, so the most alarming reported capability (remote video access) does not apply; the Bluetooth and cloud authentication issues documented for the broader Deebot line do apply until patched firmware is confirmed.
Technical notes4 sections
- Disclosure Context
-
Security researchers Dennis Giese and Braelynn presented findings at DEF CON 32 (August 2024) covering multiple Ecovacs Deebot models. The research documented a Bluetooth proximity exploit that allowed unauthorized control of the robot, exploitation of the Ecovacs Home app cloud backend authentication, and on camera-equipped models, unauthorized access to the video feed.
- N20 Pro+ Applicability
-
The N20 Pro+ does not include an onboard camera. The video-access exploit component does not apply to this unit. The Bluetooth pairing vulnerability and cloud authentication weaknesses documented in the research were not limited to camera-equipped models and are relevant to the N20 Pro+ unless addressed by a specific firmware update.
- Ecovacs Response
-
Ecovacs acknowledged the research findings and stated that software fixes were in development. No specific firmware version number or deployment date for the N20 Pro+ was disclosed publicly at the time of the researchers’ presentation.
- Owner Guidance
-
Manufacturer guidance for Ecovacs Deebot users at the time of disclosure included keeping firmware current via the Ecovacs Home app auto-update channel. No independent verification of a complete N20 Pro+-specific patch was available in the public record at launch.
-
Ecovacs Deebot N20 Pro+ launches commercially with bagless auto-empty dock
Ecovacs launched the N20 Pro+ commercially in September 2024 at a $599.99 MSRP, marking the debut of the brand's first bagless cyclonic auto-empty dock integrated with a LiDAR-navigating vacuum-mop.
Full assessment
AutonomyLIII confirmedReadinessReady Now confirmedScoreScores establishedThe bagless canister design removed the ongoing dust-bag consumable cost present across the prior N10 and N8 lines.
WatchingFor owner reports on canister-emptying frequency and mop pad durability under sustained use.
Impact on autonomy
- TrueMapping LiDAR (dToF) enables persistent room-level maps supporting scheduled zone cleaning
- Bump and IR sensor array handles obstacle contact without AI structured-light avoidance
- App-guided mapping completes on first run per manufacturer documentation
Impact on readiness
- Available at ecovacs.com and Best Buy at or below $599.99 MSRP from launch
- Bagless dock eliminates consumable bag subscription cost compared to prior Ecovacs models
- OZMO Pro 2.0 mop pad requires hand-washing; dock does not self-clean between runs
Claim check4 claims reviewed
First bagless auto-empty dock from EcovacsConfirmed per manufacturer product page; cyclonic canister collects debris without a bag. Owner reports from 2024-2025 describe weekly canister emptying at normal use volumes.Up to 300-minute runtime covering 550 sq meters per chargeManufacturer specs document this figure for the 5,200 mAh Li-ion battery. Actual runtime varies with floor type and suction mode per owner reports.OZMO Pro 2.0 delivers advanced moppingThe OZMO Pro 2.0 is a vibrating flat pad. The dock does not wash or dry the pad. Hand-washing is required after mopping sessions; the capability is light-soil scrubbing, not heavy-duty floor washing.AI obstacle avoidanceThe N20 Pro+ does not include camera or structured-light AI obstacle avoidance. Navigation uses LiDAR for mapping and bump/IR for obstacle contact. Small dark objects on the floor path are a documented contact risk.Bottom lineThe bagless dock and LiDAR navigation represent a genuine step up from the N10 generation; the mop capability and obstacle avoidance are more limited than launch marketing implied.
Technical notes4 sections
- Navigation Architecture
-
The N20 Pro+ uses TrueMapping LiDAR (dToF laser triangulation) for room mapping and persistent multi-room plan storage in the Ecovacs Home app. Obstacle detection relies on bumper contact and infrared sensors; no structured-light or RGB camera array is included in this SKU. The unit supports 2.4 GHz Wi-Fi only.
- Dock Design
-
The auto-empty station uses cyclonic airflow to transfer debris from the onboard dustbin into a reusable canister. No disposable dust bag is required. Manufacturer documentation and owner reports indicate the canister requires manual emptying; capacity and emptying frequency depend on debris volume.
- Cleaning System
-
Main brush: ZeroTangle anti-tangle roller. Suction: 8,000 Pa peak. Mop: OZMO Pro 2.0 vibrating flat pad attached at the rear. The pad is not retractable and the dock does not wash it; pad removal and hand-washing are required between mopping sessions per manufacturer guidance.
- Dimensions and Battery
-
Robot body: 13.9 x 13.9 x 3.5 inches, 7.5 lbs. Battery: 5,200 mAh Li-ion (approximately 74 Wh). Charge time: approximately 240 minutes. Runtime: up to 300 minutes per manufacturer spec.