CVE-2025-11644

Published: Oct 12, 2025Modified: Jun 17, 2026

0.3

Vector

CVSS:4.0/AV:P/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Show more

CVSS:4.0/AV:P/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow less

Source: CNA (Secondary)

Description

A weakness has been identified in Tomofun Furbo 360 and Furbo Mini. Affected by this issue is some unknown functionality of the component UART Interface. Executing manipulation can lead to insecure storage of sensitive information. The physical device can be targeted for the attack. This attack is characterized by high complexity. The exploitation is known to be difficult. The firmware versions determined to be affected are Furbo 360 up to FB0035_FW_036 and Furbo Mini up to MC0020_FW_074. The vendor was contacted early about this disclosure but did not respond in any way.

Affected (2)

Products: Furbo: Furbo Mini Firmware, Furbo 360 Dog Camera Firmware

2 products

Furbo Mini Firmware

Furbo 360 Dog Camera Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Furbo Furbo Mini Firmware	Up to 074

Running on/with	Platform Versions
Furbo Furbo Mini	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Furbo Furbo 360 Dog Camera Firmware	Up to 036

Running on/with	Platform Versions
Furbo Furbo 360 Dog Camera	All versions

Related CWEs

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Insecure Storage of Sensitive Information

The product stores sensitive information without properly limiting read or write access by unauthorized actors.

References (8)

https://github.com/dead1nfluence/Furbo-Advisories/blob/main/Insecure%20Storage%20of%20Sensitve%20Information%20-%20CVE-2025-XXXX.md

Source: cna@vuldb.com

ExploitThird Party Advisory

https://github.com/dead1nfluence/Furbo-Advisories/blob/main/Insecure%20Storage%20of%20Sensitve%20Information%20-%20CVE-2025-XXXXX.md

Source: cna@vuldb.com

ExploitThird Party Advisory

https://vuldb.com/?ctiid.328055

Source: cna@vuldb.com

Permissions RequiredVDB Entry

https://vuldb.com/?id.328055

Source: cna@vuldb.com

Third Party AdvisoryVDB Entry

https://vuldb.com/?submit.661878

Source: cna@vuldb.com

Third Party AdvisoryVDB Entry

https://vuldb.com/?submit.661879

Source: cna@vuldb.com

Third Party AdvisoryVDB Entry

https://github.com/dead1nfluence/Furbo-Advisories/blob/main/Insecure%20Storage%20of%20Sensitve%20Information%20-%20CVE-2025-XXXX.md

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

ExploitThird Party Advisory

https://github.com/dead1nfluence/Furbo-Advisories/blob/main/Insecure%20Storage%20of%20Sensitve%20Information%20-%20CVE-2025-XXXXX.md

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

ExploitThird Party Advisory

Timeline

No history available yet.