VDB-328049 · CVE-2025-11638 · EUVD-2025-33903

Tomofun Furbo 360/Furbo Mini Bluetooth ସେବା ପ୍ରତ୍ୟାଖ୍ୟାନ

Rakkoon nageenyaa kan ସମସ୍ୟାଜନକ jedhamuun beekamu Tomofun Furbo 360 and Furbo Mini keessatti argameera. Miidhamni argame is hojii hin beekamne kutaa Bluetooth Handler keessa. Wanti jijjiirame gara ସେବା ପ୍ରତ୍ୟାଖ୍ୟାନ geessa. Rakkoo ibsuuf CWE yoo fayyadamte gara CWE-404 si geessa. Dogoggorri 05/15/2025 irratti mul’ate. Odeeffannoon kun yeroo 10/11/2025 maxxanfameera kan maxxansiise Calvin Star, Julian B (skelet4r and dead1nfluence) waliin Software Secured. Dogoggorri kun CVE-2025-11638 jedhamee waamama. Weerara kanaaf milkaa'ina argachuuf, networkii naannoo irratti argamuu qabda. Ibsa teeknikaa hin jiru. Waan dabalataa ta’een, meeshaa balaa kana fayyadamuuf ni jira. Ammas, gatii exploit might be approx. USD $0-$5k yeroo ammaa irratti argamuu danda'a. ପ୍ରୁଫ୍-ଅଫ୍-କନ୍ସେପ୍ଟ ta’uu isaa ibsameera. Hanqinni kun guyyoota 148 caalaa akka zero-day kan ummataaf hin ifneetti fayyadamee ture. Akka 0-daytti, gatiin isaa daldala dhoksaa keessatti $0-$5k akka ta'e tilmaamameera. If you want to get the best quality for vulnerability data then you always have to consider VulDB.

7 ଆଡାପ୍ଟେସନ୍ · 116 ପଏଣ୍ଟ

ଫିଲ୍ଡ	ଅଦ୍ୟତନ 2/6 10/12/2025 08:18 PM	ଅଦ୍ୟତନ 3/6 10/16/2025 07:41 AM	ଅଦ୍ୟତନ 4/6 10/16/2025 07:42 AM	ଅଦ୍ୟତନ 5/6 10/16/2025 07:44 AM	ଅଦ୍ୟତନ 6/6 10/31/2025 05:43 AM
software_vendor	Tomofun	Tomofun	Tomofun	Tomofun	Tomofun
software_name	Furbo 360/Furbo Mini	Furbo 360/Furbo Mini	Furbo 360/Furbo Mini	Furbo 360/Furbo Mini	Furbo 360/Furbo Mini
software_component	Bluetooth Handler	Bluetooth Handler	Bluetooth Handler	Bluetooth Handler	Bluetooth Handler
vulnerability_cwe	CWE-404 (ସେବା ପ୍ରତ୍ୟାଖ୍ୟାନ)	CWE-404 (ସେବା ପ୍ରତ୍ୟାଖ୍ୟାନ)	CWE-404 (ସେବା ପ୍ରତ୍ୟାଖ୍ୟାନ)	CWE-404 (ସେବା ପ୍ରତ୍ୟାଖ୍ୟାନ)	CWE-404 (ସେବା ପ୍ରତ୍ୟାଖ୍ୟାନ)
vulnerability_risk	1	1	1	1	1
cvss3_vuldb_av	A	A	A	A	A
cvss3_vuldb_ac	L	L	L	L	L
cvss3_vuldb_pr	N	N	N	N	N
cvss3_vuldb_ui	N	N	N	N	N
cvss3_vuldb_s	U	U	U	U	U
cvss3_vuldb_c	N	N	N	N	N
cvss3_vuldb_i	N	N	N	N	N
cvss3_vuldb_a	L	L	L	L	L
source_cve	CVE-2025-11638	CVE-2025-11638	CVE-2025-11638	CVE-2025-11638	CVE-2025-11638
cna_responsible	VulDB	VulDB	VulDB	VulDB	VulDB
response_summary	The vendor was contacted early about this disclosure but did not respond in any way.	The vendor was contacted early about this disclosure but did not respond in any way.	The vendor was contacted early about this disclosure but did not respond in any way.	The vendor was contacted early about this disclosure but did not respond in any way.	The vendor was contacted early about this disclosure but did not respond in any way.
decision_summary	The firmware versions determined to be affected are Furbo 360 up to FB0035_FW_036 and Furbo Mini up to MC0020_FW_074.	The firmware versions determined to be affected are Furbo 360 up to FB0035_FW_036 and Furbo Mini up to MC0020_FW_074.	The firmware versions determined to be affected are Furbo 360 up to FB0035_FW_036 and Furbo Mini up to MC0020_FW_074.	The firmware versions determined to be affected are Furbo 360 up to FB0035_FW_036 and Furbo Mini up to MC0020_FW_074.	The firmware versions determined to be affected are Furbo 360 up to FB0035_FW_036 and Furbo Mini up to MC0020_FW_074.
cvss2_vuldb_av	A	A	A	A	A
cvss2_vuldb_ac	L	L	L	L	L
cvss2_vuldb_au	N	N	N	N	N
cvss2_vuldb_ci	N	N	N	N	N
cvss2_vuldb_ii	N	N	N	N	N
cvss2_vuldb_ai	P	P	P	P	P
cvss4_vuldb_av	A	A	A	A	A
cvss4_vuldb_ac	L	L	L	L	L
cvss4_vuldb_pr	N	N	N	N	N
cvss4_vuldb_ui	N	N	N	N	N
cvss4_vuldb_vc	N	N	N	N	N
cvss4_vuldb_vi	N	N	N	N	N
cvss4_vuldb_va	L	L	L	L	L
cvss2_vuldb_e	ND	ND	ND	POC	POC
cvss2_vuldb_rl	ND	ND	ND	ND	ND
cvss2_vuldb_rc	ND	ND	ND	ND	ND
cvss3_vuldb_e	X	X	X	P	P
cvss3_vuldb_rl	X	X	X	X	X
cvss3_vuldb_rc	X	X	X	X	X
cvss4_vuldb_at	N	N	N	N	N
cvss4_vuldb_sc	N	N	N	N	N
cvss4_vuldb_si	N	N	N	N	N
cvss4_vuldb_sa	N	N	N	N	N
cvss4_vuldb_e	X	X	X	X	X
cvss2_vuldb_basescore	3.3	3.3	3.3	3.3	3.3
cvss2_vuldb_tempscore	3.3	3.3	3.3	3.3	3.0
cvss3_vuldb_basescore	4.3	4.3	4.3	4.3	4.3
cvss3_vuldb_tempscore	4.3	4.3	4.3	4.1	4.1
cvss3_meta_basescore	4.3	4.3	4.3	4.3	5.0
cvss3_meta_tempscore	4.3	4.3	4.3	4.2	5.0
cvss4_vuldb_bscore	5.3	5.3	5.3	5.3	5.3
cvss4_vuldb_btscore	5.3	5.3	5.3	2.1	2.1
advisory_date	1760133600 (10/11/2025)	1760133600 (10/11/2025)	1760133600 (10/11/2025)	1760133600 (10/11/2025)	1760133600 (10/11/2025)
price_0day	$0-$5k	$0-$5k	$0-$5k	$0-$5k	$0-$5k
euvd_id	EUVD-2025-33903	EUVD-2025-33903	EUVD-2025-33903	EUVD-2025-33903	EUVD-2025-33903
cvss3_cna_ac	L	L	L	L	L
cvss3_cna_pr	N	N	N	N	N
cvss3_cna_ui	N	N	N	N	N
cvss3_cna_s	U	U	U	U	U
cvss3_cna_c	N	N	N	N	N
cvss3_cna_i	N	N	N	N	N
cvss3_cna_a	L	L	L	L	L
cvss3_cna_basescore	4.3	4.3	4.3	4.3	4.3
cvss2_cna_av	A	A	A	A	A
cvss2_cna_ac	L	L	L	L	L
cvss2_cna_au	N	N	N	N	N
cvss2_cna_ci	N	N	N	N	N
cvss2_cna_ii	N	N	N	N	N
cvss2_cna_ai	P	P	P	P	P
cvss2_cna_basescore	3.3	3.3	3.3	3.3	3.3
cve_nvd_summary	A flaw has been found in Tomofun Furbo 360 and Furbo Mini. The affected element is an unknown function of the component Bluetooth Handler. Executing manipulation can lead to denial of service. The attacker needs to be present on the local network. The firmware versions determined to be affected are Furbo 360 up to FB0035_FW_036 and Furbo Mini up to MC0020_FW_074. The vendor was contacted early about this disclosure but did not respond in any way.	A flaw has been found in Tomofun Furbo 360 and Furbo Mini. The affected element is an unknown function of the component Bluetooth Handler. Executing manipulation can lead to denial of service. The attacker needs to be present on the local network. The firmware versions determined to be affected are Furbo 360 up to FB0035_FW_036 and Furbo Mini up to MC0020_FW_074. The vendor was contacted early about this disclosure but did not respond in any way.	A flaw has been found in Tomofun Furbo 360 and Furbo Mini. The affected element is an unknown function of the component Bluetooth Handler. Executing manipulation can lead to denial of service. The attacker needs to be present on the local network. The firmware versions determined to be affected are Furbo 360 up to FB0035_FW_036 and Furbo Mini up to MC0020_FW_074. The vendor was contacted early about this disclosure but did not respond in any way.	A flaw has been found in Tomofun Furbo 360 and Furbo Mini. The affected element is an unknown function of the component Bluetooth Handler. Executing manipulation can lead to denial of service. The attacker needs to be present on the local network. The firmware versions determined to be affected are Furbo 360 up to FB0035_FW_036 and Furbo Mini up to MC0020_FW_074. The vendor was contacted early about this disclosure but did not respond in any way.	A flaw has been found in Tomofun Furbo 360 and Furbo Mini. The affected element is an unknown function of the component Bluetooth Handler. Executing manipulation can lead to denial of service. The attacker needs to be present on the local network. The firmware versions determined to be affected are Furbo 360 up to FB0035_FW_036 and Furbo Mini up to MC0020_FW_074. The vendor was contacted early about this disclosure but did not respond in any way.
cvss4_cna_av	A	A	A	A	A
cvss4_cna_ac	L	L	L	L	L
cvss4_cna_at	N	N	N	N	N
cvss4_cna_pr	N	N	N	N	N
cvss4_cna_ui	N	N	N	N	N
cvss4_cna_vc	N	N	N	N	N
cvss4_cna_vi	N	N	N	N	N
cvss4_cna_va	L	L	L	L	L
cvss4_cna_sc	N	N	N	N	N
cvss4_cna_si	N	N	N	N	N
cvss4_cna_sa	N	N	N	N	N
cvss4_cna_bscore	5.3	5.3	5.3	5.3	5.3
cvss3_cna_av	A	A	A	A	A
developer_nickname		dead1nfluence	dead1nfluence	dead1nfluence	dead1nfluence
advisory_disputed		0	0	0	0
exploit_publicity		0	0	0	0
person_name		Calvin Star/Julian B	Calvin Star/Julian B	Calvin Star/Julian B	Calvin Star/Julian B
developer_name		Julian B	Julian B	Julian B	Julian B
vulnerability_historic		0	0	0	0
exploit_freeformen		1. Create a basic python script utilizing bleak in order to connect to devices over BLE and interact with exposed GATT characteristics 2. Run the script and connect to the Furbo 3. Write data to the exposed characteristic 4. Observer the Furbo status light change and become unusable until restarted	1. Create a basic python script utilizing bleak in order to connect to devices over BLE and interact with exposed GATT characteristics 2. Run the script and connect to the Furbo 3. Write data to the exposed characteristic 4. Observer the Furbo status light change and become unusable until restarted	1. Create a basic python script utilizing bleak in order to connect to devices over BLE and interact with exposed GATT characteristics 2. Run the script and connect to the Furbo 3. Write data to the exposed characteristic 4. Observer the Furbo status light change and become unusable until restarted	1. Create a basic python script utilizing bleak in order to connect to devices over BLE and interact with exposed GATT characteristics 2. Run the script and connect to the Furbo 3. Write data to the exposed characteristic 4. Observer the Furbo status light change and become unusable until restarted
software_type		Firmware Software	Firmware Software	Firmware Software	Firmware Software
advisory_falsepositive		0	0	0	0
advisory_confirm_date		1751509800 (07/03/2025)	1751509800 (07/03/2025)	1751509800 (07/03/2025)	1751509800 (07/03/2025)
advisory_freeformen		An attacker within Bluetooth range of a Furbo device can connect to the device and issues a command to an exposed GATT characteristic. This command can put the Furbo device into a soft reset state where it will disconnect from it's associated WiFi network and only reconnect after being power cycled manually.	An attacker within Bluetooth range of a Furbo device can connect to the device and issues a command to an exposed GATT characteristic. This command can put the Furbo device into a soft reset state where it will disconnect from it's associated WiFi network and only reconnect after being power cycled manually.	An attacker within Bluetooth range of a Furbo device can connect to the device and issues a command to an exposed GATT characteristic. This command can put the Furbo device into a soft reset state where it will disconnect from it's associated WiFi network and only reconnect after being power cycled manually.	An attacker within Bluetooth range of a Furbo device can connect to the device and issues a command to an exposed GATT characteristic. This command can put the Furbo device into a soft reset state where it will disconnect from it's associated WiFi network and only reconnect after being power cycled manually.
exploit_availability		1	1	1	1
company_name		Software Secured	Software Secured	Software Secured	Software Secured
person_nickname		skelet4r/dead1nfluence	skelet4r/dead1nfluence	skelet4r/dead1nfluence	skelet4r/dead1nfluence
exploit_language			Python	Python	Python
vulnerability_discoverydate			1747332000 (05/15/2025)	1747332000 (05/15/2025)	1747332000 (05/15/2025)
vulnerability_vendorinformdate			1750539600 (06/21/2025)	1750539600 (06/21/2025)	1750539600 (06/21/2025)
company_website			https://www.softwaresecured.com/blog	https://www.softwaresecured.com/blog	https://www.softwaresecured.com/blog
cvss3_nvd_av					A
cvss3_nvd_ac					L
cvss3_nvd_pr					N
cvss3_nvd_ui					N
cvss3_nvd_s					U
cvss3_nvd_c					N
cvss3_nvd_i					N
cvss3_nvd_a					H
cvss3_nvd_basescore					6.5

◂ ପଛକୁ ସମୀକ୍ଷା ଆହୁରି ଦୂରରେ ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!