Vulnerabilities

TI-2025-10680 CVE-2025-11650 · GHSA-6cqp-frfr-84vg

Tomofun Furbo 360/Furbo Mini Password shadow weak hash

MEDIUM 40

A vulnerability was determined in Tomofun Furbo 360 and Furbo Mini.

CVSS 4.0LOW 1.0 Physical Low privileges No interaction EPSS 0.00161 Published 2025-10-12 No fix listed CWE-327

TI-2025-10679 CVE-2025-11649 · GHSA-2g2c-ch77-q38g

Tomofun Furbo 360/Furbo Mini Root Account hard-coded password

HIGH 67

A vulnerability was found in Tomofun Furbo 360 and Furbo Mini.

CVSS 4.0HIGH 7.3 Local Low privileges No interaction EPSS 0.00148 Published 2025-10-12 No fix listed CWE-255

TI-2025-10678 CVE-2025-11648 · GHSA-549v-4675-2339

Tomofun Furbo 360/Furbo Mini GATT Interface URL TF_FQDN.json server-side request forgery

MEDIUM 61

A vulnerability has been found in Tomofun Furbo 360 and Furbo Mini.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00462 Published 2025-10-12 No fix listed CWE-918

TI-2025-10677 CVE-2025-11647 · GHSA-9pr9-9ph6-wc7m

Tomofun Furbo 360/Furbo Mini GATT Service information disclosure

MEDIUM 45

A flaw has been found in Tomofun Furbo 360 and Furbo Mini.

CVSS 4.0LOW 2.3 Adjacent network No auth No interaction EPSS 0.00573 Published 2025-10-12 No fix listed CWE-200

TI-2025-10676 CVE-2025-11646 · GHSA-fhvm-9728-77cm

Tomofun Furbo 360/Furbo Mini GATT Service access control

MEDIUM 57

A vulnerability was detected in Tomofun Furbo 360 and Furbo Mini.

CVSS 4.0MEDIUM 5.3 Adjacent network No auth No interaction EPSS 0.00558 Published 2025-10-12 No fix listed CWE-266

TI-2025-10674 CVE-2025-11644 · GHSA-w576-942q-hcrp

Tomofun Furbo 360/Furbo Mini UART sensitive information

MEDIUM 40

A weakness has been identified in Tomofun Furbo 360 and Furbo Mini.

CVSS 4.0LOW 1.0 Physical No auth No interaction EPSS 0.00279 Published 2025-10-12 No fix listed CWE-200

TI-2025-10673 CVE-2025-11643 · GHSA-jw33-cfxv-r7r3

Tomofun Furbo 360/Furbo Mini MQTT Client Certificate furbo_img hard-coded credentials

MEDIUM 61

A security flaw has been discovered in Tomofun Furbo 360 and Furbo Mini.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00284 Published 2025-10-12 No fix listed CWE-259

TI-2025-10672 CVE-2025-11642 · GHSA-6gwx-6w82-gjxx

Tomofun Furbo 360/Furbo Mini Registration denial of service

LOW 18

A vulnerability was identified in Tomofun Furbo 360 and Furbo Mini.

CVSS 4.0MEDIUM 4.1 Physical Low privileges No interaction EPSS 0.00153 Published 2025-10-12 No fix listed CWE-404

TI-2025-10671 CVE-2025-11641 · GHSA-pgx2-f4qr-r5v5

Tomofun Furbo 360/Furbo Mini Trial Restriction access control

LOW 6

A vulnerability was determined in Tomofun Furbo 360 and Furbo Mini.

CVSS 4.0LOW 1.0 Physical No auth No interaction EPSS 0.00185 Published 2025-10-12 No fix listed CWE-266

TI-2025-10670 CVE-2025-11640 · GHSA-r3qc-8h8x-p7mc

Tomofun Furbo 360/Furbo Mini Bluetooth Low Energy cleartext transmission

LOW 11

A vulnerability was found in Tomofun Furbo 360 and Furbo Mini.

CVSS 4.0LOW 2.3 Adjacent network No auth No interaction EPSS 0.00217 Published 2025-10-12 No fix listed CWE-310

TI-2025-10669 CVE-2025-11639 · GHSA-fx7j-c4vg-7m5h

Tomofun Furbo 360/Furbo Mini Debug Log S3 Bucket collect_logs.sh sensitive information

MEDIUM 55

A vulnerability has been found in Tomofun Furbo 360 and Furbo Mini.

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.0024 Published 2025-10-12 No fix listed CWE-200

TI-2025-10668 CVE-2025-11638 · GHSA-g7j9-5xxp-qjf3

Tomofun Furbo 360/Furbo Mini Bluetooth denial of service

LOW 24

A flaw has been found in Tomofun Furbo 360 and Furbo Mini.

CVSS 4.0MEDIUM 5.3 Adjacent network No auth No interaction EPSS 0.0034 Published 2025-10-12 No fix listed CWE-404

TI-2025-10667 CVE-2025-11637 · GHSA-mr5f-9q2g-p2vc

Tomofun Furbo 360 Audio race condition

LOW 24

A vulnerability was detected in Tomofun Furbo 360 up to FB0035_FW_036.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0031 Published 2025-10-12 No fix listed CWE-362

TI-2025-10666 CVE-2025-11636 · GHSA-6j3q-g2mv-78p6

Tomofun Furbo 360 Account server-side request forgery

LOW 28

A security vulnerability has been detected in Tomofun Furbo 360 up to FB0035_FW_036.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00404 Published 2025-10-12 No fix listed CWE-918

TI-2025-10665 CVE-2025-11635 · GHSA-q568-j5v3-cg84

Tomofun Furbo 360 File Upload resource consumption

LOW 24

A weakness has been identified in Tomofun Furbo 360 up to FB0035_FW_036.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00465 Published 2025-10-12 No fix listed CWE-400

TI-2025-10664 CVE-2025-11634 · GHSA-g9w2-p73p-6qrw

Tomofun Furbo 360/Furbo Mini UART information disclosure

LOW 12

A security flaw has been discovered in Tomofun Furbo 360 and Furbo Mini.

CVSS 4.0LOW 2.4 Physical No auth No interaction EPSS 0.00192 Published 2025-10-12 No fix listed CWE-200

TI-2025-10663 CVE-2025-11633 · GHSA-6rrj-c3mx-rv2m

Tomofun Furbo 360/Furbo Mini HTTP Traffic collect_logs.sh upload_file_to_s3 certificate validation

LOW 28

A vulnerability was identified in Tomofun Furbo 360 and Furbo Mini.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00261 Published 2025-10-12 No fix listed CWE-287

Vulnerabilities

Filters