- Changes
- 2
- Tracking since
- Sep 2024
- Latest
- Sep 20, 2024
- Net movement
- Classification stable
- 2024
-
Security researchers disclose Bluetooth vulnerabilities affecting Ecovacs Deebot line
At DEF CON 32 in August 2024, security researchers publicly demonstrated Bluetooth-based vulnerabilities allowing unauthorized access to Ecovacs Deebot vacuums, including camera access and remote control on affected models.
Full assessment3 claims · 4 technical notes · 2 sources
Where it standsAutonomy LadderIIIIIIIVVLevel IIIConditional AutonomyHuman ReadinessReady NowNew to MarketWaitKnown IssuesRobovations Score04055708564CapableWhat happenedThe N20 Pro+ launched into this disclosure context. Ecovacs responded with a statement indicating software fixes were in progress; watch for published firmware changelogs confirming the remediation applied to the N20 Pro+.
Bottom lineThe N20 Pro+ lacks a camera, so the most alarming reported capability (remote video access) does not apply; the Bluetooth and cloud authentication issues documented for the broader Deebot line do apply until patched firmware is confirmed.
ImpactOn autonomy
- Demonstrated Bluetooth proximity exploit could allow unauthorized device control in the operating environment
- Cloud authentication weaknesses in the Ecovacs Home app backend were part of the reported attack surface
On readiness
- Privacy concerns documented at point of N20 Pro+ commercial launch create buyer caution
- No confirmed N20 Pro+-specific patch timeline was published at the time of disclosure
- Owners relying on Ecovacs Home app for scheduling face cloud-dependent risk surface
Claim check3 maker claims checked against the record. Open one to read the finding.
Secure cloud-connected home robot
Documented findingSecurity researchers at DEF CON 32 documented Bluetooth pairing exploits and cloud authentication weaknesses in Ecovacs Deebot models. The disclosures applied to the N-series lineup per researcher presentations.Ecovacs addressed all known security issues
Documented findingEcovacs issued a public statement acknowledging the findings and committing to software updates. Specific firmware version numbers and rollout timelines for N20 Pro+ were not published in the initial response per media reporting.Camera-equipped models at risk; N20 Pro+ (no camera) not affected by video exploit
Documented findingThe N20 Pro+ has no onboard camera. The camera-access component of the exploit does not apply. The Bluetooth pairing and cloud authentication components were not model-specific per researcher documentation.Evidence2 sources · 1 linked
12Aug 2024Oct 2024filed 20 Sep 2024- 1DEF CON 32 Presentation (Giese and Braelynn)10 Aug 2024
- 2ABC News4 Oct 2024named, not linked
Technical notes4 sectionsDisclosure Context
Security researchers presented findings at DEF CON 32 (August 2024) covering multiple Ecovacs Deebot models. The research documented a Bluetooth proximity exploit that allowed unauthorized control of the robot, exploitation of the Ecovacs Home app cloud backend authentication, and on camera-equipped models, unauthorized access to the video feed.
N20 Pro+ Applicability
The N20 Pro+ does not include an onboard camera. The video-access exploit component does not apply to this unit. The Bluetooth pairing vulnerability and cloud authentication weaknesses documented in the research were not limited to camera-equipped models and are relevant to the N20 Pro+ unless addressed by a specific firmware update.
Ecovacs Response
Ecovacs acknowledged the research findings and stated that software fixes were in development. No specific firmware version number or deployment date for the N20 Pro+ was disclosed publicly at the time of the researchers’ presentation.
Owner Guidance
Manufacturer guidance for Ecovacs Deebot users at the time of disclosure included keeping firmware current via the Ecovacs Home app auto-update channel. No independent verification of a complete N20 Pro+-specific patch was available in the public record at launch.
-
Ecovacs Deebot N20 Pro+ launches commercially with bagless auto-empty dock
Ecovacs launched the N20 Pro+ commercially in September 2024 at a $599.99 MSRP, marking the debut of the brand's first bagless cyclonic auto-empty dock integrated with a LiDAR-navigating vacuum-mop.
Full assessment4 claims · 4 technical notes · 2 sources
Where it standsAutonomy LadderIIIIIIIVVLevel IIIConditional AutonomyHuman ReadinessReady NowNew to MarketWaitKnown IssuesRobovations Score04055708564CapableWhat happenedThe bagless canister design removed the ongoing dust-bag consumable cost present across the prior N10 and N8 lines.
WatchingFor owner reports on canister-emptying frequency and mop pad durability under sustained use.
Bottom lineThe bagless dock and LiDAR navigation represent a genuine step up from the N10 generation; the mop capability and obstacle avoidance are more limited than launch marketing implied.
ImpactOn autonomy
- TrueMapping LiDAR (dToF) enables persistent room-level maps supporting scheduled zone cleaning
- Bump and IR sensor array handles obstacle contact without AI structured-light avoidance
- App-guided mapping completes on first run per manufacturer documentation
On readiness
- Available at ecovacs.com and Best Buy at or below $599.99 MSRP from launch
- Bagless dock eliminates consumable bag subscription cost compared to prior Ecovacs models
- OZMO Pro 2.0 mop pad requires hand-washing; dock does not self-clean between runs
Claim check4 maker claims checked against the record. Open one to read the finding.
First bagless auto-empty dock from Ecovacs
Documented findingConfirmed per manufacturer product page; cyclonic canister collects debris without a bag. Owner reports from 2024-2025 describe weekly canister emptying at normal use volumes.Up to 300-minute runtime covering 550 sq meters per charge
Documented findingManufacturer specs document this figure for the 5,200 mAh Li-ion battery. Actual runtime varies with floor type and suction mode per owner reports.OZMO Pro 2.0 delivers advanced mopping
Documented findingThe OZMO Pro 2.0 is a vibrating flat pad. The dock does not wash or dry the pad. Hand-washing is required after mopping sessions; the capability is light-soil scrubbing, not heavy-duty floor washing.AI obstacle avoidance
Documented findingThe N20 Pro+ does not include camera or structured-light AI obstacle avoidance. Navigation uses LiDAR for mapping and bump/IR for obstacle contact. Small dark objects on the floor path are a documented contact risk.Evidence2 sources · 1 linked
121 Sep 202415 Sep 2024filed 15 Sep 2024- 1Ecovacs Press Release1 Sep 2024
- 2PR Newswire10 Sep 2024named, not linked
Technical notes4 sections
Navigation Architecture
The N20 Pro+ uses TrueMapping LiDAR (dToF laser triangulation) for room mapping and persistent multi-room plan storage in the Ecovacs Home app. Obstacle detection relies on bumper contact and infrared sensors; no structured-light or RGB camera array is included in this SKU. The unit supports 2.4 GHz Wi-Fi only.
Dock Design
The auto-empty station uses cyclonic airflow to transfer debris from the onboard dustbin into a reusable canister. No disposable dust bag is required. Manufacturer documentation and owner reports indicate the canister requires manual emptying; capacity and emptying frequency depend on debris volume.
Cleaning System
Main brush: ZeroTangle anti-tangle roller. Suction: 8,000 Pa peak. Mop: OZMO Pro 2.0 vibrating flat pad attached at the rear. The pad is not retractable and the dock does not wash it; pad removal and hand-washing are required between mopping sessions per manufacturer guidance.
Dimensions and Battery
Robot body: 13.9 x 13.9 x 3.5 inches, 7.5 lbs. Battery: 5,200 mAh Li-ion (approximately 74 Wh). Charge time: approximately 240 minutes. Runtime: up to 300 minutes per manufacturer spec.