CVE-2025-2394 — Disclosure of Alibaba (OSS) Keys In Ecovacs Home Android and iOS Mobile Applications

CVE-2025-2394

Disclosure of Alibaba (OSS) Keys In Ecovacs Home Android and iOS Mobile Applications PUBLISHED

Description (CNA)

Ecovacs Home Android and iOS Mobile Applications up to version 3.3.0 contained embedded access keys and secrets for Alibaba Object Storage Service (OSS), leading to sensitive data disclosure.

Affected (CNA)

Vendor / product	Versions
Ecovacs / Ecovacs Mobile and Android Application	affected 3.3.0

CWE

CWE-798

References

https://www.themissinglink.com.au/security-advisories/cve-2025-2394
https://www.ecovacs.com/global/userhelp/dsa20250507001

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.