Republic of Korea: Internet and Security Agency and Consumer Agency released security assessment findings from investigation into cybersecurity vulnerabilities of robot vacuum cleaners

Description

Internet and Security Agency and Consumer Agency released security assessment findings from investigation into cybersecurity vulnerabilities of robot vacuum cleaners

On 2 September 2025, the Korea Internet and Security Agency and Korea Consumer Agency released a security assessment of six robot vacuum cleaner brands, including Samsung Electronics, LG Electronics, Narwal, Dreame, Roborock, and Ecovacs, distributed in the South Korean market. The assessment listed vulnerabilities that could expose users' interior photographs, allow unauthorised camera activation, and leak personal information. The assessment, conducted across 40 security parameters covering mobile application security, policy management, and device security, found that three products had insufficient user authentication procedures, enabling potential privacy violations, with Samsung and LG products performing best overall, whilst Narwal, Dreame, and Ecovacs showed security gaps. The authorities emphasised continued collaborative Internet of Things security assessments and expanded cooperation with the Ministry of Science and Information and Communications Technology to enhance product security standards.

Original source

Scope

Policy Area
Data governance
Policy Instrument
Cybersecurity regulation
Regulated Economic Activity
technological consumer goods
Implementation Level
national
Government Branch
executive
Government Body
other regulatory body

Complete timeline of this policy change

Hide details
2025-09-02
under investigation

On 2 September 2025, the Korea Internet and Security Agency and Korea Consumer Agency released a se…