Advisories · Technology
Tomofun Furbo Mini.
Every CVE that names Tomofun Furbo Mini among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 1.0 Low
Tomofun Furbo 360/Furbo Mini Password shadow weak hash
- Tomofun Furbo 360
- Tomofun Furbo Mini
- Weak cryptography or TLS
- CVSS 7.3 High
Tomofun Furbo 360/Furbo Mini Root Account hard-coded password
- Tomofun Furbo 360
- Tomofun Furbo Mini
- Hard-coded credentials
- CWE-255
- CVSS 6.3 Medium
Tomofun Furbo 360/Furbo Mini GATT Interface URL TF_FQDN.json server-side request forgery
- Tomofun Furbo 360
- Tomofun Furbo Mini
- Server-side request forgery (SSRF)
- CVSS 2.3 Low
Tomofun Furbo 360/Furbo Mini GATT Service information disclosure
- Tomofun Furbo 360
- Tomofun Furbo Mini
- Information disclosure
- Broken access control
- CVSS 5.3 Medium
Tomofun Furbo 360/Furbo Mini GATT Service access control
- Tomofun Furbo 360
- Tomofun Furbo Mini
- Privilege escalation
- Broken access control
- CVSS 1.0 Low
Tomofun Furbo 360/Furbo Mini UART sensitive information
- Tomofun Furbo 360
- Tomofun Furbo Mini
- Information disclosure
- CVSS 6.3 Medium
Tomofun Furbo 360/Furbo Mini MQTT Client Certificate furbo_img hard-coded credentials
- Tomofun Furbo 360
- Tomofun Furbo Mini
- Hard-coded credentials
- CVSS 4.1 Medium
Tomofun Furbo 360/Furbo Mini Registration denial of service
- Tomofun Furbo 360
- Tomofun Furbo Mini
- Denial of service
- CVSS 1.0 Low
Tomofun Furbo 360/Furbo Mini Trial Restriction access control
- Tomofun Furbo 360
- Tomofun Furbo Mini
- Privilege escalation
- Broken access control
- CVSS 2.3 Low
Tomofun Furbo 360/Furbo Mini Bluetooth Low Energy cleartext transmission
- Tomofun Furbo 360
- Tomofun Furbo Mini
- Weak cryptography or TLS
- CWE-310
- CVSS 4.8 Medium
Tomofun Furbo 360/Furbo Mini Debug Log S3 Bucket collect_logs.sh sensitive information
- Tomofun Furbo 360
- Tomofun Furbo Mini
- Information disclosure
- CVSS 5.3 Medium
Tomofun Furbo 360/Furbo Mini Bluetooth denial of service
- Tomofun Furbo 360
- Tomofun Furbo Mini
- Denial of service
- CVSS 2.4 Low
Tomofun Furbo 360/Furbo Mini UART information disclosure
- Tomofun Furbo 360
- Tomofun Furbo Mini
- Information disclosure
- Broken access control
- CVSS 6.3 Medium
Tomofun Furbo 360/Furbo Mini HTTP Traffic collect_logs.sh upload_file_to_s3 certificate validation
- Tomofun Furbo 360
- Tomofun Furbo Mini
- Authentication bypass
- Weak cryptography or TLS