Vulnerabilities

TI-2025-10680 CVE-2025-11650 · GHSA-6cqp-frfr-84vg

Tomofun Furbo 360/Furbo Mini Password shadow weak hash

MEDIUM 40

A vulnerability was determined in Tomofun Furbo 360 and Furbo Mini.

CVSS 4.0LOW 1.0 Physical Low privileges No interaction EPSS 0.00161 Published 2025-10-12 No fix listed CWE-327

TI-2025-10679 CVE-2025-11649 · GHSA-2g2c-ch77-q38g

Tomofun Furbo 360/Furbo Mini Root Account hard-coded password

HIGH 67

A vulnerability was found in Tomofun Furbo 360 and Furbo Mini.

CVSS 4.0HIGH 7.3 Local Low privileges No interaction EPSS 0.00148 Published 2025-10-12 No fix listed CWE-255

TI-2025-10678 CVE-2025-11648 · GHSA-549v-4675-2339

Tomofun Furbo 360/Furbo Mini GATT Interface URL TF_FQDN.json server-side request forgery

MEDIUM 61

A vulnerability has been found in Tomofun Furbo 360 and Furbo Mini.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00462 Published 2025-10-12 No fix listed CWE-918

TI-2025-10677 CVE-2025-11647 · GHSA-9pr9-9ph6-wc7m

Tomofun Furbo 360/Furbo Mini GATT Service information disclosure

MEDIUM 45

A flaw has been found in Tomofun Furbo 360 and Furbo Mini.

CVSS 4.0LOW 2.3 Adjacent network No auth No interaction EPSS 0.00573 Published 2025-10-12 No fix listed CWE-200

TI-2025-10676 CVE-2025-11646 · GHSA-fhvm-9728-77cm

Tomofun Furbo 360/Furbo Mini GATT Service access control

MEDIUM 57

A vulnerability was detected in Tomofun Furbo 360 and Furbo Mini.

CVSS 4.0MEDIUM 5.3 Adjacent network No auth No interaction EPSS 0.00558 Published 2025-10-12 No fix listed CWE-266

TI-2025-10675 CVE-2025-11645 · GHSA-272g-xw7r-xqgg

Tomofun Furbo Mobile App Authentication Token sensitive information

MEDIUM 46

A security vulnerability has been detected in Tomofun Furbo Mobile App up to 7.57.0a on Android.

CVSS 4.0LOW 2.4 Physical No auth No interaction EPSS 0.00294 Published 2025-10-12 No fix listed CWE-200

TI-2025-10674 CVE-2025-11644 · GHSA-w576-942q-hcrp

Tomofun Furbo 360/Furbo Mini UART sensitive information

MEDIUM 40

A weakness has been identified in Tomofun Furbo 360 and Furbo Mini.

CVSS 4.0LOW 1.0 Physical No auth No interaction EPSS 0.00279 Published 2025-10-12 No fix listed CWE-200

TI-2025-10673 CVE-2025-11643 · GHSA-jw33-cfxv-r7r3

Tomofun Furbo 360/Furbo Mini MQTT Client Certificate furbo_img hard-coded credentials

MEDIUM 61

A security flaw has been discovered in Tomofun Furbo 360 and Furbo Mini.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00284 Published 2025-10-12 No fix listed CWE-259

TI-2025-10672 CVE-2025-11642 · GHSA-6gwx-6w82-gjxx

Tomofun Furbo 360/Furbo Mini Registration denial of service

LOW 18

A vulnerability was identified in Tomofun Furbo 360 and Furbo Mini.

CVSS 4.0MEDIUM 4.1 Physical Low privileges No interaction EPSS 0.00153 Published 2025-10-12 No fix listed CWE-404

TI-2025-10671 CVE-2025-11641 · GHSA-pgx2-f4qr-r5v5

Tomofun Furbo 360/Furbo Mini Trial Restriction access control

LOW 6

A vulnerability was determined in Tomofun Furbo 360 and Furbo Mini.

CVSS 4.0LOW 1.0 Physical No auth No interaction EPSS 0.00185 Published 2025-10-12 No fix listed CWE-266

TI-2025-10670 CVE-2025-11640 · GHSA-r3qc-8h8x-p7mc

Tomofun Furbo 360/Furbo Mini Bluetooth Low Energy cleartext transmission

LOW 11

A vulnerability was found in Tomofun Furbo 360 and Furbo Mini.

CVSS 4.0LOW 2.3 Adjacent network No auth No interaction EPSS 0.00217 Published 2025-10-12 No fix listed CWE-310

TI-2025-10669 CVE-2025-11639 · GHSA-fx7j-c4vg-7m5h

Tomofun Furbo 360/Furbo Mini Debug Log S3 Bucket collect_logs.sh sensitive information

MEDIUM 55

A vulnerability has been found in Tomofun Furbo 360 and Furbo Mini.

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.0024 Published 2025-10-12 No fix listed CWE-200

TI-2025-10668 CVE-2025-11638 · GHSA-g7j9-5xxp-qjf3

Tomofun Furbo 360/Furbo Mini Bluetooth denial of service

LOW 24

A flaw has been found in Tomofun Furbo 360 and Furbo Mini.

CVSS 4.0MEDIUM 5.3 Adjacent network No auth No interaction EPSS 0.0034 Published 2025-10-12 No fix listed CWE-404

TI-2025-10667 CVE-2025-11637 · GHSA-mr5f-9q2g-p2vc

Tomofun Furbo 360 Audio race condition

LOW 24

A vulnerability was detected in Tomofun Furbo 360 up to FB0035_FW_036.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0031 Published 2025-10-12 No fix listed CWE-362

TI-2025-10666 CVE-2025-11636 · GHSA-6j3q-g2mv-78p6

Tomofun Furbo 360 Account server-side request forgery

LOW 28

A security vulnerability has been detected in Tomofun Furbo 360 up to FB0035_FW_036.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00404 Published 2025-10-12 No fix listed CWE-918

TI-2025-10665 CVE-2025-11635 · GHSA-q568-j5v3-cg84

Tomofun Furbo 360 File Upload resource consumption

LOW 24

A weakness has been identified in Tomofun Furbo 360 up to FB0035_FW_036.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00465 Published 2025-10-12 No fix listed CWE-400

TI-2025-10664 CVE-2025-11634 · GHSA-g9w2-p73p-6qrw

Tomofun Furbo 360/Furbo Mini UART information disclosure

LOW 12

A security flaw has been discovered in Tomofun Furbo 360 and Furbo Mini.

CVSS 4.0LOW 2.4 Physical No auth No interaction EPSS 0.00192 Published 2025-10-12 No fix listed CWE-200

TI-2025-10663 CVE-2025-11633 · GHSA-6rrj-c3mx-rv2m

Tomofun Furbo 360/Furbo Mini HTTP Traffic collect_logs.sh upload_file_to_s3 certificate validation

LOW 28

A vulnerability was identified in Tomofun Furbo 360 and Furbo Mini.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00261 Published 2025-10-12 No fix listed CWE-287

TI-2023-13221 CVE-2023-28704 · GHSA-52cw-mfvg-73mg

Furbo dog camera - Command Injection

MEDIUM 42

Furbo dog camera has insufficient filtering for special parameter of device log management function.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00996 Published 2023-06-02 No fix listed CWE-78

Vulnerabilities

Filters