Security experts have found a serious vulnerability in robotic vacuum cleaners and other smart devices from the Chinese brand Ecovacs.