VDB-328047 · CVE-2025-11636 · EUVD-2025-33899

Tomofun Furbo 360 ଯେପର୍ଯ୍ୟନ୍ତ FB0035_FW_036 Account ବିସ୍ତାରିତ ଅଧିକାର

Rakkoon nageenyaa kan ଜଟିଳ jedhamuun beekamu Tomofun Furbo 360 ଯେପର୍ଯ୍ୟନ୍ତ FB0035_FW_036 keessatti argameera. Kan miidhamte is hojii hin beekamne kutaa Account Handler keessa. Hojii jijjiirraa gara ବିସ୍ତାରିତ ଅଧିକାର geessa. CWE fayyadamuun rakkoo ibsuun gara CWE-918 geessa. Dogoggorri 05/15/2025 keessatti argame. Dadhabbii kana yeroo 10/11/2025 maxxanfameera kan maxxansiise Calvin Star, Julian B (skelet4r and dead1nfluence) waliin Software Secured. Dogoggorri kun akka CVE-2025-11636tti beekama. Yaaliin weeraraa fageenya irraa jalqabamuu ni danda'a. Faayidaaleen teeknikaa hin jiru. Waliigalatti, meeshaa balaa kana fayyadamuuf jiru. Amma, gatii ammee exploit might be approx. USD $0-$5k ta'uu danda'a. Akka ପ୍ରୁଫ୍-ଅଫ୍-କନ୍ସେପ୍ଟ jedhamee ibsameera. Hanqinni kun guyyoota 148 caalaa akka zero-day kan ummataaf hin ifneetti fayyadamee ture. Akka 0-daytti, gatii daldalaa dhoksaa tilmaamame $0-$5k ta'ee ture. Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

6 ଆଡାପ୍ଟେସନ୍ · 114 ପଏଣ୍ଟ

ଫିଲ୍ଡ	ଅଦ୍ୟତନ 1/5 10/12/2025 05:57 PM	ଅଦ୍ୟତନ 2/5 10/12/2025 06:45 PM	ଅଦ୍ୟତନ 3/5 10/16/2025 07:41 AM	ଅଦ୍ୟତନ 4/5 10/16/2025 07:44 AM	ଅଦ୍ୟତନ 5/5 10/31/2025 04:51 AM
software_vendor	Tomofun	Tomofun	Tomofun	Tomofun	Tomofun
software_name	Furbo 360	Furbo 360	Furbo 360	Furbo 360	Furbo 360
software_version	<=FB0035_FW_036	<=FB0035_FW_036	<=FB0035_FW_036	<=FB0035_FW_036	<=FB0035_FW_036
software_component	Account Handler	Account Handler	Account Handler	Account Handler	Account Handler
vulnerability_cwe	CWE-918 (ବିସ୍ତାରିତ ଅଧିକାର)	CWE-918 (ବିସ୍ତାରିତ ଅଧିକାର)	CWE-918 (ବିସ୍ତାରିତ ଅଧିକାର)	CWE-918 (ବିସ୍ତାରିତ ଅଧିକାର)	CWE-918 (ବିସ୍ତାରିତ ଅଧିକାର)
vulnerability_risk	2	2	2	2	2
cvss3_vuldb_av	N	N	N	N	N
cvss3_vuldb_ac	H	H	H	H	H
cvss3_vuldb_pr	N	N	N	N	N
cvss3_vuldb_ui	N	N	N	N	N
cvss3_vuldb_s	U	U	U	U	U
cvss3_vuldb_c	L	L	L	L	L
cvss3_vuldb_i	L	L	L	L	L
cvss3_vuldb_a	L	L	L	L	L
source_cve	CVE-2025-11636	CVE-2025-11636	CVE-2025-11636	CVE-2025-11636	CVE-2025-11636
cna_responsible	VulDB	VulDB	VulDB	VulDB	VulDB
response_summary	The vendor was contacted early about this disclosure but did not respond in any way.	The vendor was contacted early about this disclosure but did not respond in any way.	The vendor was contacted early about this disclosure but did not respond in any way.	The vendor was contacted early about this disclosure but did not respond in any way.	The vendor was contacted early about this disclosure but did not respond in any way.
cvss2_vuldb_av	N	N	N	N	N
cvss2_vuldb_ac	H	H	H	H	H
cvss2_vuldb_au	N	N	N	N	N
cvss2_vuldb_ci	P	P	P	P	P
cvss2_vuldb_ii	P	P	P	P	P
cvss2_vuldb_ai	P	P	P	P	P
cvss4_vuldb_av	N	N	N	N	N
cvss4_vuldb_ac	H	H	H	H	H
cvss4_vuldb_pr	N	N	N	N	N
cvss4_vuldb_ui	N	N	N	N	N
cvss4_vuldb_vc	L	L	L	L	L
cvss4_vuldb_vi	L	L	L	L	L
cvss4_vuldb_va	L	L	L	L	L
cvss2_vuldb_e	ND	ND	ND	POC	POC
cvss2_vuldb_rl	ND	ND	ND	ND	ND
cvss2_vuldb_rc	ND	ND	ND	ND	ND
cvss3_vuldb_e	X	X	X	P	P
cvss3_vuldb_rl	X	X	X	X	X
cvss3_vuldb_rc	X	X	X	X	X
cvss4_vuldb_at	N	N	N	N	N
cvss4_vuldb_sc	N	N	N	N	N
cvss4_vuldb_si	N	N	N	N	N
cvss4_vuldb_sa	N	N	N	N	N
cvss4_vuldb_e	X	X	X	X	X
cvss2_vuldb_basescore	5.1	5.1	5.1	5.1	5.1
cvss2_vuldb_tempscore	5.1	5.1	5.1	5.1	4.6
cvss3_vuldb_basescore	5.6	5.6	5.6	5.6	5.6
cvss3_vuldb_tempscore	5.6	5.6	5.6	5.3	5.3
cvss3_meta_basescore	5.6	5.6	5.6	5.6	6.4
cvss3_meta_tempscore	5.6	5.6	5.6	5.4	6.3
cvss4_vuldb_bscore	6.3	6.3	6.3	6.3	6.3
cvss4_vuldb_btscore	6.3	6.3	6.3	2.9	2.9
advisory_date	1760133600 (10/11/2025)	1760133600 (10/11/2025)	1760133600 (10/11/2025)	1760133600 (10/11/2025)	1760133600 (10/11/2025)
price_0day	$0-$5k	$0-$5k	$0-$5k	$0-$5k	$0-$5k
cve_nvd_summary	A security vulnerability has been detected in Tomofun Furbo 360 up to FB0035_FW_036. This issue affects some unknown processing of the component Account Handler. Such manipulation leads to server-side request forgery. The attack can be executed remotely. This attack is characterized by high complexity. The exploitability is assessed as difficult. The vendor was contacted early about this disclosure but did not respond in any way.	A security vulnerability has been detected in Tomofun Furbo 360 up to FB0035_FW_036. This issue affects some unknown processing of the component Account Handler. Such manipulation leads to server-side request forgery. The attack can be executed remotely. This attack is characterized by high complexity. The exploitability is assessed as difficult. The vendor was contacted early about this disclosure but did not respond in any way.	A security vulnerability has been detected in Tomofun Furbo 360 up to FB0035_FW_036. This issue affects some unknown processing of the component Account Handler. Such manipulation leads to server-side request forgery. The attack can be executed remotely. This attack is characterized by high complexity. The exploitability is assessed as difficult. The vendor was contacted early about this disclosure but did not respond in any way.	A security vulnerability has been detected in Tomofun Furbo 360 up to FB0035_FW_036. This issue affects some unknown processing of the component Account Handler. Such manipulation leads to server-side request forgery. The attack can be executed remotely. This attack is characterized by high complexity. The exploitability is assessed as difficult. The vendor was contacted early about this disclosure but did not respond in any way.	A security vulnerability has been detected in Tomofun Furbo 360 up to FB0035_FW_036. This issue affects some unknown processing of the component Account Handler. Such manipulation leads to server-side request forgery. The attack can be executed remotely. This attack is characterized by high complexity. The exploitability is assessed as difficult. The vendor was contacted early about this disclosure but did not respond in any way.
cvss4_cna_av	N	N	N	N	N
cvss4_cna_ac	H	H	H	H	H
cvss4_cna_at	N	N	N	N	N
cvss4_cna_pr	N	N	N	N	N
cvss4_cna_ui	N	N	N	N	N
cvss4_cna_vc	L	L	L	L	L
cvss4_cna_vi	L	L	L	L	L
cvss4_cna_va	L	L	L	L	L
cvss4_cna_sc	N	N	N	N	N
cvss4_cna_si	N	N	N	N	N
cvss4_cna_sa	N	N	N	N	N
cvss4_cna_bscore	6.3	6.3	6.3	6.3	6.3
cvss3_cna_av	N	N	N	N	N
cvss3_cna_ac	H	H	H	H	H
cvss3_cna_pr	N	N	N	N	N
cvss3_cna_ui	N	N	N	N	N
cvss3_cna_s	U	U	U	U	U
cvss3_cna_c	L	L	L	L	L
cvss3_cna_i	L	L	L	L	L
cvss3_cna_a	L	L	L	L	L
cvss3_cna_basescore	5.6	5.6	5.6	5.6	5.6
cvss2_cna_av	N	N	N	N	N
cvss2_cna_ac	H	H	H	H	H
cvss2_cna_au	N	N	N	N	N
cvss2_cna_ci	P	P	P	P	P
cvss2_cna_ii	P	P	P	P	P
cvss2_cna_ai	P	P	P	P	P
cvss2_cna_basescore	5.1	5.1	5.1	5.1	5.1
euvd_id		EUVD-2025-33899	EUVD-2025-33899	EUVD-2025-33899	EUVD-2025-33899
advisory_disputed			0	0	0
advisory_freeformen			An attacker who compromises the Furbo account of a legitimate user can coerce the device to make a request to an attacker-controlled server by modifying the URL which is sent during the recording of a new treat toss sound. The end result is that the Furbo will download a file from the attacker's server.	An attacker who compromises the Furbo account of a legitimate user can coerce the device to make a request to an attacker-controlled server by modifying the URL which is sent during the recording of a new treat toss sound. The end result is that the Furbo will download a file from the attacker's server.	An attacker who compromises the Furbo account of a legitimate user can coerce the device to make a request to an attacker-controlled server by modifying the URL which is sent during the recording of a new treat toss sound. The end result is that the Furbo will download a file from the attacker's server.
exploit_publicity			0	0	0
person_name			Calvin Star/Julian B	Calvin Star/Julian B	Calvin Star/Julian B
vulnerability_vendorinformdate			1750539600 (06/21/2025)	1750539600 (06/21/2025)	1750539600 (06/21/2025)
company_website			https://www.softwaresecured.com/blog	https://www.softwaresecured.com/blog	https://www.softwaresecured.com/blog
vulnerability_discoverydate			1747332000 (05/15/2025)	1747332000 (05/15/2025)	1747332000 (05/15/2025)
advisory_confirm_date			1751509800 (07/03/2025)	1751509800 (07/03/2025)	1751509800 (07/03/2025)
exploit_availability			1	1	1
exploit_freeformen			1. Create a Frida script hook the treat toss service and replace the URL with an attacker controlled URL 2. Start the Furbo app and Frida Server on a jail broken phone 3. Run the Fride Script 4. In the Furbo app, navigate to the Furbo device settings. 5. Select Treat Toss Sound and enable "Record My Own Sound". 6. Record a short audio clip and Swipe right to push the change. 7. On the attacker-controlled server, observe the inbound request from the Furbo Device.	1. Create a Frida script hook the treat toss service and replace the URL with an attacker controlled URL 2. Start the Furbo app and Frida Server on a jail broken phone 3. Run the Fride Script 4. In the Furbo app, navigate to the Furbo device settings. 5. Select Treat Toss Sound and enable "Record My Own Sound". 6. Record a short audio clip and Swipe right to push the change. 7. On the attacker-controlled server, observe the inbound request from the Furbo Device.	1. Create a Frida script hook the treat toss service and replace the URL with an attacker controlled URL 2. Start the Furbo app and Frida Server on a jail broken phone 3. Run the Fride Script 4. In the Furbo app, navigate to the Furbo device settings. 5. Select Treat Toss Sound and enable "Record My Own Sound". 6. Record a short audio clip and Swipe right to push the change. 7. On the attacker-controlled server, observe the inbound request from the Furbo Device.
person_nickname			skelet4r/dead1nfluence	skelet4r/dead1nfluence	skelet4r/dead1nfluence
software_type			Firmware Software	Firmware Software	Firmware Software
vulnerability_historic			0	0	0
exploit_wormified			0	0	0
company_name			Software Secured	Software Secured	Software Secured
advisory_falsepositive			0	0	0
cvss3_nvd_av					N
cvss3_nvd_ac					H
cvss3_nvd_pr					N
cvss3_nvd_ui					N
cvss3_nvd_s					U
cvss3_nvd_c					H
cvss3_nvd_i					H
cvss3_nvd_a					H
cvss3_nvd_basescore					8.1

◂ ପଛକୁ ସମୀକ୍ଷା ଆହୁରି ଦୂରରେ ▸

Interested in the pricing of exploits?

See the underground prices here!