Dreame X50 Ultra (RLX85CE)

Security Grade

Calculator v1

Dreame X50 Ultra

   Brand: Dreame (Parent: Dreame Technology (Xiaomi ecosystem))

   Category: Robot vacuum • Model / Gen: X50 series RLX85CE

   Release Date: 2025-01-01 • Status: In sale

   Classification Date: 2026-10-29 • Official Website

Security Evaluation

Criterion	Value	Proof	Comment
Known hardware tampering	Rare	🔗 Proof	The Korea Consumer Agency rated device security at the lowest level for this model and reported relatively low hardware security, but no public teardown documents an exposed debug interface.
Known vulnerabilities	None	🔗 Proof	No CVE entry matching Dreame was found in the NVD at the time of classification; the published findings are test results rather than assigned vulnerabilities.
Prior attacks	None	🔗 Proof	The agency states that exploitation would require a highly skilled attacker and that such leaks are unlikely under normal use; no in-the-wild abuse was reported.
Updatability	Very common	🔗 Proof	Dreame delivers firmware over the air through the Dreamehome app.
Category Score	Score: 2 / 3

Criterion	Value	Proof	Comment
Authentication with other systems	Partial	🔗 Proof	The agency found inadequate user authentication in the mobile app, which could allow unauthorised access or manipulation of the robot.
Communications	Encrypted with obselete encryption	🔗 Proof	Firmware security settings were found to be insufficient across all tested models including this one, and no documentation of current transport encryption was published.
Storage	Encrypted with obselete encryption	🔗 Proof	Map and personal data handling were criticised in the policy review, and no vendor documentation of encryption at rest was found.
Category Score	Score: 2 / 3

Criterion	Value	Proof	Comment
Account management	Basic	🔗 Proof	The agency rated policy management at the lowest level because personal data such as names and contact details are handled under an inadequate policy.
Authentication	Basic	🔗 Proof	Mobile app security was rated the lowest because the camera could be activated externally, showing that authentication does not reliably protect the most sensitive function.
Brute-force protection	Basic	🔗 Proof	No published documentation of failed-attempt lockout for the app or cloud API.
Event logging	Partial logging	🔗 Proof	Cleaning history and maps are available; no full security audit log is documented.
Passwords	Require change after setup	🔗 Proof	Access depends on the Dreamehome cloud account; no device local password policy.
Category Score	Score: 2 / 3

Property	Details
Operating System & App	Embedded Linux (Companion App: Dreamehome app (iOS / Android))
Hardware (CPU / GPU)	CPU: N/A • GPU: N/A
Memory & Storage	Memory: N/A • Storage: Dust bin and water tanks in the dock
Power, Battery & Charging	Battery: Li-ion, approx. 6400 mAh • Power: Dock 100-240 V AC; robot charging through the dock • Charging: Auto emptying and self cleaning dock
Display & Camera	Display: None • Camera: RGB camera with laser distance navigation
Sound & Connectivity	Sound: Microphone and speaker for voice assistant • Connectivity: Wi-Fi 802.11 b/g/n/ac, Bluetooth
Physical (Dimensions & Mass)	Dimensions: Robot approx. 350 x 350 x 105 mm; dock approx. 400 x 450 x 550 mm • Mass: approx. 12 kg with dock